aljaz/CTFd
1
0
Fork 0
mirror of https://github.com/aljazceru/CTFd.git synced 2025-12-17 14:04:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

Mark 2.2.3 (#1222)

Browse Source 
2.2.3 / 2020-01-21
==================

### This release includes a critical security fix for CTFd versions >= 2.0.0

All CTFd administrators are recommended to take the following steps:
1. Upgrade their installations to the latest version
2. Rotate the `SECRET_KEY` value
3. Reset the passwords for all administrator users

**Security**
* This release includes a fix for a vulnerability allowing an arbitrary user to take over other accounts given their username and a CTFd instance with emails enabled

**General**
* Users will receive an email notification when their passwords are reset
* Fixed an error when users provided incorrect team join information
This commit is contained in:
Kevin Chung
2020-01-21 00:06:03 -05:00
committed by GitHub
parent a2551db690
commit d59bfa3578
4 changed files with 21 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/conf.py
View File

@@ -26,7 +26,7 @@ author = u'Kevin Chung'
# The short X.Y version
version = u''
# The full version, including alpha/beta/rc tags
release = u'2.2.2'
release = u'2.2.3'
# -- General configuration ---------------------------------------------------