Rating:

tl;dr Franklin Reiter related message attack

Original writeup (https://amritabi0s.wordpress.com/2018/03/12/n1ctf-2018-rsa_padding-writeup/).