Zip Bomb Vulnerability in Chall-Manager from ctfer-io

CVE-2025-53633

What is CVE-2025-53633?

Chall-Manager exposes a critical vulnerability due to a lack of size verification when decoding zip archives. This can lead to the execution of zip bombs, causing resource exhaustion. Notably, the exploitation does not require any authentication or authorization, making it accessible for potential attackers. As a mitigation measure, it is advisable to deploy Chall-Manager deep within the infrastructure to minimize exposure. A patch resolving this issue has been implemented in version 0.1.4, which addresses the vulnerability and enhances overall security.

References