Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitrary files outside the intended directories via supplying a crafted import.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-17 | 1 | PoC1 |
| 2026-03-18 | 1 | General1 |
| 2026-03-19 | 1 | Disclosure1 |
GitHub - syphonetic/CVE-2026-30345 · GitHub - https://github.com/syphonetic/CVE-2026-30345?tab=readme-ov-file
Post summary
The excerpt merely points to a GitHub repository named after CVE-2026-30345, offering no additional context on the vulnerability, its exploitation, or mitigation.
CVE-2026-30345 A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitrary files outside the intended directories via … https://www.cve.org/CVERecord?id=CVE-2026-30345
Post summary
Disclosed a zip slip vulnerability in CTFd’s Admin import that enables arbitrary file writes outside intended directories.
CVE-2026-30345 CVE-2026-30345 Proof of Concept Arbitrary file write vulnerability in CTFd < 3.8.2 backup import functionality. Quick Start Step 1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30345
Post summary
The post announces CVE-2026-30345 as an arbitrary file write flaw in CTFd versions below 3.8.2, provides a statement of a proof‑of‑concept, but offers no evidence of active exploitation, a patch, or detailed exploit code.