Skip to content
OpenAdvisories

Vendor

FlagForgeCTF

8 known vulnerabilities.

Products

flagForge 8
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-61777 Public exploit

    FlagForge Allows Unauthenticated Badge Template API Access

    Flag Forge is a Capture The Flag (CTF) platform. Starting in version 2.0.0 and prior to version 2.3.2, the `/api/admin/badge-templates` (GET) and `/api/admin/badge-templates/create` (POST) endpoints previously allowed access without authentication or authoriz…

    FlagForgeCTF flagForge
  • Critical 9.8
    CVE-2025-59841

    FlagForgeCTF's Improper Session Handling Allows Access After Logout

    Flag Forge is a Capture The Flag (CTF) platform. In versions from 2.2.0 to before 2.3.1, the FlagForge web application improperly handles session invalidation. Authenticated users can continue to access protected endpoints, such as /api/profile, even after lo…

    FlagForgeCTF flagForge