Threats tagged 'ghsa-7wpf-4jwj-r2v3'

A logic flaw in CTFd versions 3.7.0 through 3.7.4 allows authenticated users to change their team assignment after registration, enabling them to join a different team during an ongoing competition. This behavior violates the intended restriction that team assignment should only occur once at registration. The issue was fixed in version 3.7.5.