Lucene search
+L

1 matches found

OSV
OSV
added 2025/07/10 7:36 p.m.19 views

CVE-2025-53632 Chall-Manager's scenario decoding process does not check for zip slips

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario i.e. a zip archive, the path of the file to write is not checked, potentially leading to zip slips. Exploitation does not require authentication nor authorization, so anyone can...

8.8CVSS6.6AI score
SaveExploits0References5
Rows per page
Query Builder