Security Advisory

CVE-2024-34699

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-13 19:01:19
Last updated 2024-08-02 02:59:21
Assigner GitHub_M
State PUBLISHED

Description

GZ::CTF is a capture the flag platform. Prior to 0.20.1, unprivileged user can perform cross-site scripting attacks on other users by constructing malicious team names. This problem has been fixed in `v0.20.1`.