CVE-2023-33386: Marsctf Project Marsctf

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

MarsCTF 1.2.1 has an arbitrary file upload vulnerability in the interface for uploading attachments in the background.

Affected products

• Marsctf Project Marsctf: version 1.2.1 only

Published 2023-06-05. Last modified 2026-06-17.