VYPR
High severity7.5NVD Advisory· Published Mar 18, 2026· Updated Apr 28, 2026

CVE-2026-30345

CVE-2026-30345

Description

A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitrary files outside the intended directories via supplying a crafted import.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • CTFd/CTFdllm-create
    Range: = v3.8.1-18-gdb5a18c4

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.