Description
GZ::CTF is a capture the flag platform. Prior to 0.20.1, unprivileged user can perform cross-site scripting attacks on other users by constructing malicious team names. This problem has been fixed in `v0.20.1`.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GZTimeWalker | GZCTF | < 0.20.1 | — |