Vulnerability GO-2026-6868
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:54 PM UTC
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values in github.com/ctfer-io/terraform-provider-ctfd
>=0.1.5
>=0.1.5
Summary
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values in github.com/ctfer-io/terraform-provider-ctfd
Details
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values in github.com/ctfer-io/terraform-provider-ctfd
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
9 days ago
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
>=0.1.5 <=1.1.0 GHSA-vg84-c5mg-76xh
>=0.1.5 <=1.1.0 GHSA-vg84-c5mg-76xh
High Risk
9 days ago
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
<2.8.2 GHSA-vg84-c5mg-76xh
<2.8.2 GHSA-vg84-c5mg-76xh
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:54 PM UTC
Fixed (v2.8.2)
1 month ago
September 17, 2026 at 08:43 AM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC