CTFd vulnerabilities

3 published CVEs name CTFd among the affected products.

Critical 0High 0Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-121562
CTFd 3.1.0 before 3.8.7 Information Disclosure via /api/v1/teams Endpoint
CTFd · CTFd
Medium6.9
CVE-2024-11717
Tokens in CTFd used for account activation and password resetting can be used interchangeably for these operations. When used, they are sent to the server as a…
CTFd · CTFd
Medium6.3
CVE-2024-11716
While assignment of a user to a team (bracket) in CTFd should be possible only once, at the registration, a flaw in logic implementation allows an…
CTFd · CTFd
Medium5.3