Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-34699

GZ::CTF allows unprivileged user can perform XSS attacks by constructing malicious team names.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

GZ::CTF is a capture the flag platform. Prior to 0.20.1, unprivileged user can perform cross-site scripting attacks on other users by constructing malicious team names. This problem has been fixed in `v0.20.1`.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GZTimeWalker GZCTF

  • < 0.20.1affected

References