Vulnerabilities in ctfer-io
10 resultsCVE-2025-53632HIGHChall-Manager's scenario decoding process does not check for zip slipsEPSS 0.8%CVE-2026-32771HIGHMonitoring is vulnerable to Archive Slip due to missing checks in sanitizationEPSS 0.7%CVE-2025-53633HIGHChall-Manager's scenario decoding process does not check for zip bombsEPSS 0.5%CVE-2026-32769HIGHFullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespaceEPSS 0.5%CVE-2025-53634HIGHChall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacksEPSS 0.5%CVE-2026-32805HIGHRomeo is vulnerable to Archive Slip due to missing checks in sanitizationEPSS 0.5%CVE-2026-32737HIGHRomeo's invalid NetworkPolicy enables a malicious actor to pivot into another namespaceEPSS 0.4%CVE-2026-116683HIGHCTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive valuesEPSS 0.4%CVE-2026-32768HIGHChall-Manager's invalid NetworkPolicy enables a malicious actor to pivot into another namespaceEPSS 0.3%CVE-2026-32720HIGHImproper Access Control in github.com/ctfer-io/monitoringEPSS 0.3%