Headline
GHSA-93wx-j2qv-49fg: hCaptcha for EXT:form Broken Access Control vulnerability
An issue was discovered in the hcaptcha (aka hCaptcha for EXT:form) extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check.
hCaptcha for EXT:form Broken Access Control vulnerability
Moderate severity GitHub Reviewed Published Aug 23, 2023 to the GitHub Advisory Database • Updated Aug 23, 2023
Related news
CVE-2023-41100: Broken Access Control in extension "hCaptcha for EXT:form" (hcaptcha)
An issue was discovered in the hcaptcha (aka hCaptcha for EXT:form) extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check.