2025-04-21 00:00:00
mitre
PUBLISHED
Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.