Skip to content
OpenAdvisories

Vendor

The-Scratch-Channel

5 known vulnerabilities.

Products

the-scratch-channel.github.io 3 tsc-web-client 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2025-59416

    The Scratch Channel forks can publish articles

    The Scratch Channel is a news website. If the user makes a fork, they can change the admins and make an article. Since the API uses a POST request, it will make an article. This issue is fixed in v1.2.

    The-Scratch-Channel tsc-web-client
  • High 8.7
    CVE-2025-57805

    The Scratch Channel's Publish Articles POST Request Can Upload Articles Without Validation

    The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2.

    The-Scratch-Channel tsc-web-client