FlagForgeCTF

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

FlagForgeCTF records in CISA KEV

No FlagForgeCTF vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flagforge 8 records MEDIUM

Records

8 records in Flagforge · all components

TI-2025-38170 CVE-2025-61777

FlagForge Allows Unauthenticated Badge Template API Access

MEDIUM 49

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00451 Published 2025-10-06 Fixed in 2.3.2 CWE-200

TI-2025-37280 CVE-2025-59841

FlagForgeCTF's Improper Session Handling Allows Access After Logout

MEDIUM 49

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00394 Published 2025-09-25 Fixed in 2.3.1 CWE-384

TI-2025-37266 CVE-2025-59827

FlagForgeCTF is Missing Authorization in main-v2

MEDIUM 48

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00371 Published 2025-09-24 No fix listed CWE-862

TI-2025-37320 CVE-2025-59932

FlagForgeCTF Unauthenticated Resource Modification/Deletion

MEDIUM 43

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00367 Published 2025-09-27 Fixed in 2.3.1 CWE-284

TI-2026-17569 CVE-2026-21868

Flag Forge has ReDoS Vulnerability in User Profile Lookup API

LOW 39

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00312 Published 2026-01-08 Fixed in 2.3.3 CWE-1333

TI-2025-37272 CVE-2025-59833

FlagForgeCTF Hint Exposure via API

LOW 39

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2025-09-24 Fixed in 2.3.0 CWE-200

TI-2025-37282 CVE-2025-59843

FlagForgeCTF Exposes User Emails via Public /api/user/[username] API

LOW 37

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00414 Published 2025-09-26 Fixed in 2.3.2 CWE-359

TI-2025-37265 CVE-2025-59826

FlagForgeCTF Vulnerable to Unauthorized Problem Creation

LOW 33

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00235 Published 2025-09-23 No fix listed CWE-862

Open these records in search →