~ / search / GHSA-93wx-j2qv-49fg

GHSA-93wx-j2qv-49fg

hCaptcha for EXT:form Broken Access Control vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-41100

Packages

EcosystemPackageAffectedFixed in
Packagist waldhacker/hcaptcha < 2.1.2 2.1.2

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the hcaptcha (aka hCaptcha for EXT:form) extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check.

References

External links from the advisory. They lead to third-party sites.