bluemark — Vulnerabilities & Security Advisories 3

Bluemark provides digital asset management solutions for creative workflows, primarily serving marketing and design teams. Historically, vulnerabilities have included stored cross-site scripting (XSS) in image metadata handling, remote code execution (RCE) through manipulated file uploads, and privilege escalation via insecure direct object references. The platform's security posture has been marked by inconsistent input validation and insufficient access controls. While no major public incidents have been documented, the three recorded CVEs highlight ongoing challenges in secure file processing and permission management, particularly when handling user-generated content across collaborative environments.