Ctfd

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 9
    Known Exploited: 0
    1
    Critical Level Threats
    2
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-121562

    CTFd 3.1.0 before 3.8.7 Information Disclosure via /api/v1/teams Endpoint

    Last Modified: Nov 03, 2026
    Published: Nov 03, 2026

    CVE-2025-29419

    CTFd v3.7.6 Man-in-the-Middle Vulnerability

    Last Modified: Aug 31, 2026
    Published: Aug 26, 2026

    CVE-2026-78145

    CTFd __init__.py _is_safe_url redirect

    Last Modified: Aug 24, 2026
    Published: Aug 23, 2026

    CVE-2026-30345

    CTFd Zip Slip Vulnerability in Admin Import Enables Arbitrary File Write

    Last Modified: Apr 28, 2026
    Published: Mar 18, 2026

    CVE-2024-11717

    Tokens in CTFd used for account activation and password resetting can be used interchangeably for these operations. When used, they are sent to the server as a GET parameter and they are not single use, which means, that during token expiration time an on-path attacker might reuse such a token to change user's password and take over the account. Moreover, the tokens also include base64 encoded user email. This issue impacts releases up to 3.7.4 and was addressed by pull request 2679 https://github.com/CTFd/CTFd/pull/2679  included in 3.7.5 release.

    Last Modified: Apr 15, 2026
    Published: Jan 02, 2025
    Items Per Page
    Ctfd Vulnerabilities & Security CVEs | CVE-DB