Skip to content
OpenAdvisories

Product · FlagForgeCTF

flagForge

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-59843 Public exploit

    FlagForgeCTF Exposes User Emails via Public /api/user/[username] API

    Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.2, the public endpoint /api/user/[username] returns user email addresses in its JSON response. The fix, intended for release in 2.3.1 but only available starting in version 2.3…

    FlagForgeCTF flagForge