https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T19:22:02.500848+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-116683 CVE-2026-116683 — CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive v… 2026-11-05T19:22:02.502334+00:00

Affected: ctfer-io terraform-provider-ctfd

CTFer.io's CTFd Terraform Provider manages CTFd resources as code. From 0.1.5 until 2.8.2, ctfd_team.password is stored as a non-sensitive value in Terraform state. A local or remote user with access to that state can read the team password without an additional decryption step. This issue is fixed in 2.8.2.