Path Traversal Vulnerability in Chall-Manager by Ctfer
CVE-2025-53632
Key Information:
- Vendor
Ctfer-io
- Status
- Vendor
- CVE Published:
- 10 July 2025
Badges
What is CVE-2025-53632?
Chall-Manager, an adaptable framework for initiating challenges on demand, is susceptible to a path traversal vulnerability stemming from improper file path verification during the extraction of zip archives. This oversight could facilitate the 'zip slip' attack, allowing attackers to manipulate file paths and potentially access restricted system areas. The vulnerability does not necessitate any form of authentication, making it particularly concerning. It is advisable to secure the Chall-Manager deployment within a deeply nested infrastructure to mitigate exposure risks. A patch addressing this issue has been integrated in version 0.1.4.
Affected Version(s)
chall-manager < 0.1.4
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.