GitHub Advisoryadvisory · Packagist

GHSA-93wx-j2qv-49fg hCaptcha for EXT:form Broken Access Control vulnerability

MEDIUM Published 2023-08-23 Modified 2023-08-31 Official page ↗
Aliases
CVE-2023-41100
Ecosystem
Packagist
Packages
waldhacker/hcaptcha
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Reviewed
2023-08-23

Affected packages

• Packagist waldhacker/hcaptcha: < 2.1.2 → fixed in 2.1.2

Description

An issue was discovered in the hcaptcha (aka hCaptcha for EXT:form) extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check.

Related

Alias · CVE (1)

  • CVE-2023-41100 An issue was discovered in the hcaptcha (aka hCaptcha for EXT:form) extension before 2.1.2 for TYPO3. vulnerability

References