Skip to content
OpenAdvisories

Package · Go

github.com/ctfer-io/chall-manager

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-53632 Public exploit

    Chall-Manager's scenario decoding process does not check for zip slips

    Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario (i.e. a zip archive), the path of the file to write is not checked, potentially leading to zip slips. Exploitation does not require authentica…

    ctfer-io chall-manager github.com/ctfer-io/chall-manager Go