Skip to content
OpenAdvisories

Vendor

redpwn

1 known vulnerabilities.

Products

rctf 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2020-5290

    session fixation in rCTF

    In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the `#token=$ssid` hash when making a request to the `/verify` endpoint. An attacker team could potentially steal flags by, for example, exploiting a stored XSS …

    redpwn rctf