CVEvulnerability

CVE-2019-16699

9.8 CRITICAL Published 2019-10-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-10-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-20

Description

The sr_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution.

Affected configurations

• sr freecap project sr freecap (>= 2.4.0 <= 2.4.5) • sr freecap project sr freecap (>= 2.5.0 <= 2.5.2)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References