Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. The HTTP Gateway processes headers, but with no timeout set. With a slow loris attack, an attacker could cause Denial of Service (DoS). Exploitation does not require authentication nor authorization, so anyone can exploit it. It should nonetheless not be exploitable as it is highly recommended to bury Chall-Manager deep within the infrastructure due to its large capabilities, so no users could reach the system. Patch has been implemented by commit 1385bd8 and shipped in v0.1.4.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Vendors Products
Ctfer-io
  • Chall-manager

Configuration 1 [-]

cpe:2.3:a:ctfer-io:chall-manager:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://github.com/ctfer-io/chall-manager/commit/1385bd869142651146cd0b123085f91cec698636 cve-icon cve-icon
https://github.com/ctfer-io/chall-manager/releases/tag/v0.1.4 cve-icon cve-icon
https://github.com/ctfer-io/chall-manager/security/advisories/GHSA-ggmv-j932-q89q cve-icon cve-icon
History

Thu, 14 Aug 2025 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Ctfer-io
Ctfer-io chall-manager
CPEs cpe:2.3:a:ctfer-io:chall-manager:*:*:*:*:*:*:*:*
Vendors & Products Ctfer-io
Ctfer-io chall-manager
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00095}

 epss

{'score': 0.00113}

Fri, 11 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00095}

Thu, 10 Jul 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 10 Jul 2025 20:00:00 +0000

Type Values Removed Values Added
Description Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. The HTTP Gateway processes headers, but with no timeout set. With a slow loris attack, an attacker could cause Denial of Service (DoS). Exploitation does not require authentication nor authorization, so anyone can exploit it. It should nonetheless not be exploitable as it is highly recommended to bury Chall-Manager deep within the infrastructure due to its large capabilities, so no users could reach the system. Patch has been implemented by commit 1385bd8 and shipped in v0.1.4.
Title Chall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks
Weaknesses CWE-770
References
Metrics cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2025-07-10T19:39:57.816Z

Updated: 2025-07-10T20:26:58.612Z

Reserved: 2025-07-07T14:20:38.390Z

Link: CVE-2025-53634

cve-icon Vulnrichment

Updated: 2025-07-10T20:26:55.512Z

cve-icon NVD

Status : Analyzed

Published: 2025-07-10T20:15:27.987

Modified: 2025-08-14T20:41:40.660

Link: CVE-2025-53634

cve-icon Redhat

No data.