Security Advisory
CVE-2024-34699
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
GZ::CTF is a capture the flag platform. Prior to 0.20.1, unprivileged user can perform cross-site scripting attacks on other users by constructing malicious team names. This problem has been fixed in `v0.20.1`.