Vulnerabilities > Ctfd > Rctf

DATE CVE VULNERABILITY TITLE RISK
2020-04-01 CVE-2020-5290 Session Fixation vulnerability in Ctfd Rctf
In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the `#token=$ssid` hash when making a request to the `/verify` endpoint.
network
low complexity
ctfd CWE-384
6.5