flaskBlog Authorization Bypass Vulnerability in Admin Subroutes

An authorization bypass vulnerability has been identified in flaskBlog versions through 2.8.0. The issue arises because user roles are only checked when accessing the main '/admin' page, not its subroutes. This oversight allows unauthorized users to access sensitive data and bypass intended restrictions on pages related to posts and comments administration.

Impact

Exploitation of this vulnerability allows unauthorized users to access admin subroutes for managing posts and comments, bypassing normal authorization checks.

Reproduction

To reproduce this vulnerability, log in as a user without admin privileges and attempt to access any of the following admin subroutes: '/admin/posts', '/adminpanel/posts', '/admin/comments', or '/adminpanel/comments'. The absence of a user role check on these subroutes will allow access, despite not having the necessary admin rights.

Remediation

Implement a user role check for all admin subroutes to ensure that only authorized users can access them.