ractf

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ractf records in CISA KEV

No ractf vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Core 1 record LOW

Records

2 records

TI-2021-04429 CVE-2021-21329

Multi Factor Authentication Token Improperly Validated On User Login

MEDIUM 45

RATCF is an open-source framework for hosting Cyber-Security Capture the Flag events.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01621 Published 2021-03-08 No fix listed CWE-287

TI-2020-12007 CVE-2020-15235

Sensitive data exposure in RACTF

LOW 35

In RACTF before commit f3dc89b, unauthenticated users are able to get the value of sensitive config keys that would normally be hidden to everyone except admins.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01019 Published 2020-10-05 No fix listed CWE-200

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0