Skip to content
OpenAdvisories

Vendor

GZTimeWalker

1 known vulnerabilities.

Products

GZCTF 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-34699

    GZ::CTF allows unprivileged user can perform XSS attacks by constructing malicious team names.

    GZ::CTF is a capture the flag platform. Prior to 0.20.1, unprivileged user can perform cross-site scripting attacks on other users by constructing malicious team names. This problem has been fixed in `v0.20.1`.

    GZTimeWalker GZCTF