This vulnerability in CTFd affects the _is_safe_url function, which fails to properly validate the 'Next' parameter, enabling an attacker to craft URLs that redirect users to malicious sites. The issue is present in versions 3.8.0 through 3.8.4. The vulnerability is classified as an open redirect and can be triggered remotely without privileges or authentication, requiring user interaction. A patch commit (5d8515842fd1ab2c3a9f2dde9ffca907aa334ea9) has been referenced, but no official vendor advisory or remediation level is provided in the data.

Successful exploitation could lead to users being redirected to attacker-controlled websites, potentially facilitating phishing or social engineering attacks. The vulnerability does not allow direct code execution or data compromise but can be used to trick users into unsafe interactions. The CVSS 4.0 score is 5.3 (medium severity), reflecting the remote attack vector, lack of required privileges, and user interaction requirement.

Upgrading CTFd to a version that includes the patch identified by commit 5d8515842fd1ab2c3a9f2dde9ffca907aa334ea9 is recommended. Since no official vendor advisory or remediation level is provided, verify the patch availability and apply it accordingly. Until patched, users should be cautious of URLs containing the 'Next' parameter to avoid redirection to untrusted sites.