CVE-2022-31055

HOCH 7.5CVE-2022-31055 · Published 13/06/2022 · updated 17/06/2026

Kurz gesagt

CVE-2022-31055 ist eine Schwachstelle (HOCH (CVSS 7.5)) in kctf (google).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.64%, höher als bei 51.2% aller Schwachstellen.
Abhilfe: auf 1.6.0 oder neuer aktualisieren.

Package	Affected versions	Patched versions
kctf google	`< 1.6.0`	`1.6.0`

Description

kCTF is a Kubernetes-based infrastructure for capture the flag (CTF) competitions. Prior to version 1.6.0, the kctf cluster set-src-ip-ranges was broken and allowed traffic from any IP. The problem has been patched in v1.6.0. As a workaround, those who want to test challenges privately can mark them as `public: false` and use `kctf chal debug port-forward` to connect.

References

google/kctf commit 8cf050b · Patch
google/kctf#371 · Patch
google/kctf security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free