CVE-2024-11716 | CTFd up to 3.7.4 Bracket CTFd/schemas/users.py validate_bracket_id access control

A vulnerability, which was classified as problematic, was found in CTFd up to 3.7.4. This affects the function validate_bracket_id of the file CTFd/schemas/users.py of the component Bracket Handler. The manipulation leads to improper access controls.

This vulnerability is uniquely identified as CVE-2024-11716. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

It is recommended to apply a patch to fix this issue.