CVE-2020-5290: Session Fixation

In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the token=$ssid hash when making a request to the /verify endpoint. An attacker team could potentially steal flags by, for example, exploiting a stored XSS payload in a CTF challenge so that victim...

PT-2020-18380

Name of the Vulnerable Software and Affected Versions RedpwnCTF versions prior to 2.3 Description The issue is related to a session fixation vulnerability that can be exploited through the token=$ssid hash when making a request to the "/verify" endpoint. An attacker could potentially steal flags ...