search

jdabtieu / CTFOJ

Lightweight CTF judge platform for capture-the-flag (CTF) clubs
GNU Affero General Public License v3.0
10 stars 5 forks source link

[BUG] No security checks when accessing dl files #211

Closed jdabtieu closed 1 year ago

jdabtieu commented 1 year ago

Competitors can download attachments of future contests and draft problems

This was temporarily patched for BxMCTF manually but requires a more robust solution