CVE-2024-34699

Publication date

2024-05-13 19:01:19

Family

GitHub_M

State

PUBLISHED

Description

GZ::CTF is a capture the flag platform. Prior to 0.20.1, unprivileged user can perform cross-site scripting attacks on other users by constructing malicious team names. This problem has been fixed in `v0.20.1`.