Denial of Service Vulnerability in Chall-Manager by ctfer-io
CVE-2025-53634

8.7HIGH

Key Information:

Vendor

Ctfer-io

Status
Chall-manager
Vendor
CVE Published:
10 July 2025

What is CVE-2025-53634?

The Chall-Manager application is at risk of Denial of Service due to an improper handling of HTTP headers by its gateway, which lacks a timeout feature. This vulnerability allows attackers to initiate a slow loris attack, potentially overwhelming the system and rendering it inoperable. No authentication or authorization is required for exploitation, making it a significant threat. To mitigate risks, users are strongly advised to implement the presence of Chall-Manager in secure areas of the infrastructure. A patch addressing this issue was released in version 0.1.4.

Affected Version(s)

chall-manager < 0.1.4

References

https://github.com/ctfer-io/chall-manager/security/adviso...
x_refsource_CONFIRM
https://github.com/ctfer-io/chall-manager/commit/1385bd86...
x_refsource_MISC
https://github.com/ctfer-io/chall-manager/releases/tag/v0...
x_refsource_MISC

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.