Approved changes feed: RSS · Atom
cpe:2.3:a:ractf:core:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ractf (4253f06e-ebb3-5631-834b-22bbbd6a26b4) |
|---|---|
| Product | Core (d9eed07a-0be3-5300-9b5a-0b7f3b4e0f1c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/ractf/core |
purl2cpe | 2026-06-01 10:16:35.135568 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-21329 |
vulnerable | 2026-06-08 05:29:11.621820 |
Multi Factor Authentication Token Improperly Validated On User Login
HIGH (8.7)
RATCF is an open-source framework for hosting Cyber-Security Capture the Flag events. In affected versions of RATCF users with multi factor authentication enabled are able to log in without a valid token. This is fixed in commit cebb67b.
Published: 2021-03-08T17:15:16.000Z
Updated: 2024-08-03T18:09:15.191Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15235 |
vulnerable | 2026-06-08 05:19:25.559266 |
Sensitive data exposure in RACTF
MEDIUM (5.9)
In RACTF before commit f3dc89b, unauthenticated users are able to get the value of sensitive config keys that would normally be hidden to everyone except admins. All versions after commit f3dc89b9f6ab1544a289b3efc06699b13d63e0bd(3/10/20) are patched.
Published: 2020-10-05T15:15:13.000Z
Updated: 2024-08-04T13:08:23.234Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.