CVE-2025-24886 pwn.college has Symlink LFI in Dojo repos

pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Incorrect symlink checks on user specified dojos allows for users admin not required to perform an LFI from the CTFd container. When a user clones or updates repositories, a check...

DOJO 安全漏洞

DOJO is an open source JavaScript toolkit from pwn.college. DOJO suffers from a security vulnerability that stems from the fact that incorrect symbolic link checking of a user-specified dojo can cause a user to execute an LFI from a CTFd container, which allows a malicious user to make a reposito...