CVE-2025-53633

CVE-2025-53633 describes a critical vulnerability in ctfer_io Chall-Manager, where improper handling of zipped scenario files can lead to a zip bomb decompression attack. This flaw allows an unauthenticated and unauthorized attacker to trigger a denial-of-service condition due to unchecked content size during decoding. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.