Skip to content
OpenAdvisories

Vendor

CTFd

3 known vulnerabilities.

Products

CTFd 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-121562

    CTFd 3.1.0 before 3.8.7 Information Disclosure via /api/v1/teams Endpoint

    CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes non-public team custom field values. Unauthenticated attackers can paginate GET requests to collect hidden registration data such as email…

    CTFd CTFd
  • Medium 6.3
    CVE-2024-11717

    Tokens in CTFd used for account activation and password resetting can be used interchangeably for these operations. Whe…

    CTFd CTFd
  • Medium 5.3
    CVE-2024-11716 EPSS 12%

    While assignment of a user to a team (bracket) in CTFd should be possible only once, at the registration, a flaw in log…

    CTFd CTFd