Mblunt

**Name of the Vulnerable Software and Affected Versions** CTFd versions prior to 3.8.5 **Description** An open redirect issue exists where remote attackers can manipulate the `Next` argument. This occurs within the ` is safe url()` function located in the `CTFd/utils/validators/ init .py` file. **Recommendations** Update to a version newer than 3.8.4. As a temporary mitigation, restrict or validate the input passed to the `Next` argument to prevent redirection to untrusted domains.

**Name of the Vulnerable Software and Affected Versions** social-media-skeleton (affected versions not specified) **Description** The issue is related to a SQL injection vulnerability in the social-media-skeleton project, which allows UNION based injections and can indirectly lead to remote code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.