CTFd

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

CTFd records in CISA KEV

No CTFd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ctfd 1 record MEDIUM Rctf 1 record LOW

Records

1 record in Ctfd · all components

TI-2020-05852 CVE-2020-7245 · GHSA-qrhm-93gw-vg83

Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows…

MEDIUM 44

Incorrect username validation in the registration process of CTFd v2.0.0 - v2.2.2 allows an attacker to take over an arbitrary account if the username is known and emails are enabled on the CTFd instance.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01166 Published 2020-01-23 No fix listed CWE-640

Open these records in search →

Critical	1
High	0
Medium	4
Low	0
No CVSS	0