CVE-2024-34699 — GZ::CTF allows unprivileged user can perform XSS attacks by constructing malicious team names.
GZ::CTF is a capture the flag platform. Prior to 0.20.1, unprivileged user can perform cross-site scripting attacks on other users by constructing malicious team names. This pro…
Published: 2024-05-13 · CVSS: 6.5 · CVSS 3.1
GZ::CTF is a capture the flag platform. Prior to 0.20.1, unprivileged user can perform cross-site scripting attacks on other users by constructing malicious team names. This problem has been fixed in `v0.20.1`.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7