4 matches found
CVE-2024-42988
CTFd contains a lack of access control in the ChallengeSolves endpoint (/api/v1/challenges//solves) affecting v2.0.0–v3.7.2, enabling authenticated users to retrieve the list of solvers regardless of Account Visibility settings. The issue is fixed in v3.7.3+. Impact is limited to information expo...
CVE-2024-42988
Lack of access control in ChallengeSolves /api/v1/challenges//solves of CTFd v2.0.0 - v3.7.2 allows authenticated users to retrieve a list of users who have solved the challenge, regardless of the Account Visibility settings. The issue is fixed in v3.7.3+...
CVE-2023-27779
AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form...
Fedora 17 : kernel-3.7.3-101.fc17 (2013-1025)
Rebase to Linux v3.7.3. A large number of bug fixes across the entire tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introduci...