[ Vendor · 1 CVEs ]
ctfer-io
CVEs affecting ctfer-io published in the last 30 days, plus any ctfer-io CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-116683 | 27 Oct 2026 | CVSS 7.1 | CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive valuesCTFer.io's CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, ctfd_team.password is stored as a non-sensitive value in… | Fix |