Description
An issue in the validate_email function in CTFd/utils/validators/__init__.py of CTFd 3.7.3 allows attackers to cause a Regular expression Denial of Service (ReDoS) via supplying a crafted string as e-mail address during registration.
High · 7.5
CVE-2024-46242
EUVD-2024-42190GHSA-8rg4-cvw3-v3c2
An issue in the validate_email function in CTFd/utils/validators/__init__.py of CTFd 3.7.3 allows attackers to cause a Regular expression D…
Published Jan 7, 2025 · Updated Jul 5, 2026 · Assigned by mitre