CVE-2022-31055

kCTF is a Kubernetes-based infrastructure for capture the flag (CTF) competitions. Prior to version 1.6.0, the kctf cluster set-src-ip-ranges was broken and allowed traffic from any IP. The problem has been patched in v1.6.0. As a workaround, those who want to test challenges privately can mark them as `public: false` and use `kctf chal debug port-forward` to connect.

• CWE-284

• https://github.com/google/kctf/commit/8cf050be974fcc2fd8aa136701f9a66f2b2a5202Patch, Third Party Advisory
• https://github.com/google/kctf/pull/371Patch, Third Party Advisory
• https://github.com/google/kctf/security/advisories/GHSA-4g2v-6qc6-6jv5Third Party Advisory
• https://github.com/google/kctf/commit/8cf050be974fcc2fd8aa136701f9a66f2b2a5202Patch, Third Party Advisory
• https://github.com/google/kctf/pull/371Patch, Third Party Advisory
• https://github.com/google/kctf/security/advisories/GHSA-4g2v-6qc6-6jv5Third Party Advisory

Published

Jun 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3105An issue was discovered in the Linux kernel through 5.16-rc6…5.5
• CVE-2022-31050TYPO3 is an open source web content management system. Prior…7.2
• CVE-2022-31051semantic-release is an open source npm package for automated…7.5
• CVE-2022-31052Synapse is an open source home server implementation for the…6.5
• CVE-2022-31053Biscuit is an authentication and authorization token for mic…9.8
• CVE-2022-31054Argo Events is an event-driven workflow automation framework…7.5
• CVE-2022-31056GLPI is a Free Asset and IT Management Software package, Dat…9.8
• CVE-2022-31057Shopware is an open source e-commerce software made in Germa…5.4
• CVE-2022-31058Tuleap is a Free & Open Source Suite to improve management o…7.2
• CVE-2022-31059Discourse Calendar is a calendar plugin for Discourse, an op…5.4
• CVE-2022-3106An issue was discovered in the Linux kernel through 5.16-rc6…5.5
• CVE-2022-31060Discourse is an open-source discussion platform. Prior to ve…5.3