{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-11716", "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "state": "PUBLISHED", "assignerShortName": "CERT-PL", "dateReserved": "2024-11-25T17:36:38.975Z", "datePublished": "2025-01-02T16:07:46.868Z", "dateUpdated": "2025-11-03T21:52:05.067Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "CTFd", "repo": "https://github.com/CTFd/CTFd", "vendor": "CTFd", "versions": [{"lessThanOrEqual": "3.7.4", "status": "affected", "version": "3.7.0", "versionType": "git"}]}], "credits": [{"lang": "en", "type": "finder", "value": "B\u0142a\u017cej Adamczyk (efigo.pl)"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "While assignment of a user to a team (bracket) in&nbsp;<span style=\"background-color: rgb(255, 255, 255);\">CTFd </span> should be possible only once, at the registration, a flaw in logic implementation allows an authenticated user to reset it's bracket and then pick a new one, joining another team while a competition is already ongoing.<br>This issue impacts releases from 3.7.0 up to 3.7.4 and was addressed by <a target=\"_blank\" rel=\"nofollow\" href=\"https://github.com/CTFd/CTFd/pull/2636\">pull request 2636</a>&nbsp;included in 3.7.5 release."}], "value": "While assignment of a user to a team (bracket) in\u00a0CTFd should be possible only once, at the registration, a flaw in logic implementation allows an authenticated user to reset it's bracket and then pick a new one, joining another team while a competition is already ongoing.\nThis issue impacts releases from 3.7.0 up to 3.7.4 and was addressed by pull request 2636 https://github.com/CTFd/CTFd/pull/2636 \u00a0included in 3.7.5 release."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 5.3, "baseSeverity": "MEDIUM", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-837", "description": "CWE-837 Improper Enforcement of a Single, Unique Action", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "shortName": "CERT-PL", "dateUpdated": "2025-01-02T16:07:46.868Z"}, "references": [{"tags": ["patch"], "url": "https://github.com/CTFd/CTFd/pull/2636"}, {"tags": ["third-party-advisory"], "url": "https://cert.pl/en/posts/2025/01/CVE-2024-11716"}, {"tags": ["product"], "url": "https://ctfd.io/"}, {"tags": ["vendor-advisory"], "url": "https://blog.ctfd.io/ctfd-3-7-5/"}, {"tags": ["mailing-list", "exploit"], "url": "https://seclists.org/fulldisclosure/2024/Dec/21"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"references": [{"url": "https://seclists.org/fulldisclosure/2024/Dec/21", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-02T17:34:30.679929Z", "id": "CVE-2024-11716", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-02T17:34:54.872Z"}}, {"title": "CVE Program Container", "references": [{"url": "http://seclists.org/fulldisclosure/2024/Dec/21"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T21:52:05.067Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://seclists.org/fulldisclosure/2024/Dec/21"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T21:52:05.067Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-11716", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-01-02T17:34:30.679929Z"}}}], "references": [{"url": "https://seclists.org/fulldisclosure/2024/Dec/21", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-02T17:34:44.734Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "B\u0142a\u017cej Adamczyk (efigo.pl)"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/CTFd/CTFd", "vendor": "CTFd", "product": "CTFd", "versions": [{"status": "affected", "version": "3.7.0", "versionType": "git", "lessThanOrEqual": "3.7.4"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/CTFd/CTFd/pull/2636", "tags": ["patch"]}, {"url": "https://cert.pl/en/posts/2025/01/CVE-2024-11716", "tags": ["third-party-advisory"]}, {"url": "https://ctfd.io/", "tags": ["product"]}, {"url": "https://blog.ctfd.io/ctfd-3-7-5/", "tags": ["vendor-advisory"]}, {"url": "https://seclists.org/fulldisclosure/2024/Dec/21", "tags": ["mailing-list", "exploit"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "While assignment of a user to a team (bracket) in\u00a0CTFd should be possible only once, at the registration, a flaw in logic implementation allows an authenticated user to reset it's bracket and then pick a new one, joining another team while a competition is already ongoing.\nThis issue impacts releases from 3.7.0 up to 3.7.4 and was addressed by pull request 2636 https://github.com/CTFd/CTFd/pull/2636 \u00a0included in 3.7.5 release.", "supportingMedia": [{"type": "text/html", "value": "While assignment of a user to a team (bracket) in&nbsp;<span style=\"background-color: rgb(255, 255, 255);\">CTFd </span> should be possible only once, at the registration, a flaw in logic implementation allows an authenticated user to reset it's bracket and then pick a new one, joining another team while a competition is already ongoing.<br>This issue impacts releases from 3.7.0 up to 3.7.4 and was addressed by <a target=\"_blank\" rel=\"nofollow\" href=\"https://github.com/CTFd/CTFd/pull/2636\">pull request 2636</a>&nbsp;included in 3.7.5 release.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-837", "description": "CWE-837 Improper Enforcement of a Single, Unique Action"}]}], "providerMetadata": {"orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "shortName": "CERT-PL", "dateUpdated": "2025-01-02T16:07:46.868Z"}}}, "cveMetadata": {"cveId": "CVE-2024-11716", "state": "PUBLISHED", "dateUpdated": "2025-11-03T21:52:05.067Z", "dateReserved": "2024-11-25T17:36:38.975Z", "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "datePublished": "2025-01-02T16:07:46.868Z", "assignerShortName": "CERT-PL"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "While assignment of a user to a team (bracket) in\u00a0CTFd should be possible only once, at the registration, a flaw in logic implementation allows an authenticated user to reset it's bracket and then pick a new one, joining another team while a competition is already ongoing.\nThis issue impacts releases from 3.7.0 up to 3.7.4 and was addressed by pull request 2636 https://github.com/CTFd/CTFd/pull/2636 \u00a0included in 3.7.5 release."}, {"lang": "es", "value": "Si bien la asignaci\u00f3n de un usuario a un equipo (grupo) en CTFd deber\u00eda ser posible solo una vez, en el momento del registro, una falla en la implementaci\u00f3n de la l\u00f3gica permite que un usuario autenticado restablezca su grupo y luego elija uno nuevo, uni\u00e9ndose a otro equipo mientras una competencia ya est\u00e1 en curso. Este problema afecta las versiones desde la 3.7.0 hasta la 3.7.4 y se solucion\u00f3 mediante la solicitud de incorporaci\u00f3n de cambios 2636 https://github.com/CTFd/CTFd/pull/2636 incluida en la versi\u00f3n 3.7.5."}], "id": "CVE-2024-11716", "lastModified": "2026-04-15T00:35:42.020", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cvd@cert.pl", "type": "Secondary"}]}, "published": "2025-01-02T17:15:07.090", "references": [{"source": "cvd@cert.pl", "url": "https://blog.ctfd.io/ctfd-3-7-5/"}, {"source": "cvd@cert.pl", "url": "https://cert.pl/en/posts/2025/01/CVE-2024-11716"}, {"source": "cvd@cert.pl", "url": "https://ctfd.io/"}, {"source": "cvd@cert.pl", "url": "https://github.com/CTFd/CTFd/pull/2636"}, {"source": "cvd@cert.pl", "url": "https://seclists.org/fulldisclosure/2024/Dec/21"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2024/Dec/21"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://seclists.org/fulldisclosure/2024/Dec/21"}], "sourceIdentifier": "cvd@cert.pl", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-837"}], "source": "cvd@cert.pl", "type": "Secondary"}]}

{}

{"created": "2025-07-12T22:09:59.994397+00:00", "updated": "2025-07-12T22:09:59.994446+00:00", "vendors": ["ctfd", "ctfd$PRODUCT$ctfd"]}