blossom-editor vulnerabilities and threats

Blossom versions up to 1.17.1 have an authorization bypass vulnerability that allows authenticated users to access and manipulate other users' folders. This occurs because the FolderService only filters queries by folder ID, enabling attackers to supply another user's folder ID to endpoints such as /folder/info, /folder/upd, /folder/open, or /folder/del. Exploitation can lead to unauthorized reading of storage paths, renaming, toggling visibility, or deletion of folders.

Blossom Editor versions up to 1.17.1 have an authorization bypass vulnerability allowing authenticated users with non-readonly privileges to manipulate other users' pictures by specifying arbitrary picture IDs. This flaw enables attackers to delete images or change their star status via specific endpoints.