High severity8.7NVD Advisory· Published Mar 8, 2021· Updated Jun 17, 2026

CVE-2021-21329

Description

RATCF is an open-source framework for hosting Cyber-Security Capture the Flag events. In affected versions of RATCF users with multi factor authentication enabled are able to log in without a valid token. This is fixed in commit cebb67b.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ractf/corellm-create
ractf/RATCFllm-fuzzy
ractf/corev5
Range: >c57a4d186bfc586ad3edfe4dcba9f11efbf22f09, < cebb67bd16a8296121201805332365ffccb29638
Ratcf/Ratcf
cpe:2.3:a:ratcf:ratcf:*:*:*:*:*:*:*:*
Range: <2021-02-26

Patches

Vulnerability mechanics

References

github.com/ractf/core/commit/c57a4d186bfc586ad3edfe4dcba9f11efbf22f09nvdPatchThird Party Advisory
github.com/ractf/core/commit/cebb67bd16a8296121201805332365ffccb29638nvdPatchThird Party Advisory
github.com/ractf/core/security/advisories/GHSA-fw57-f7mq-9q85nvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.565
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000