Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-116683 1 Ctfer-io 1 Terraform-provider-ctfd 2026-10-28 N/A
CTFer.io's CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, ctfd_team.password is stored as a non-sensitive value in Terraform state. A local or remote user with access to that state can read the team password without an additional decryption step. This issue is fixed in 2.8.2.