PT-2023-27786 · Typo3+1 · Typo3+1

Devid Messner · Publicado 2023-08-22 · Atualizado 2023-08-28 · CVE-2023-41100

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions hCaptcha for EXT:form extension versions prior to 2.1.2 for TYPO3

Description An issue was discovered in the hcaptcha extension, where it fails to check that the required captcha field is submitted in the form data, allowing a remote user to bypass the CAPTCHA check.

Recommendations For versions prior to 2.1.2, update to version 2.1.2 or later to resolve the issue. As a temporary workaround, consider implementing additional validation checks on form submissions to verify the presence of the required captcha field.

Exploit

Correção

Identificadores relacionados

CVE-2023-41100

GHSA-93WX-J2QV-49FG

Produtos afetados

Typo3

Hcaptcha

Referências · 9

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/waldhacker/hcaptcha/CVE-2023-41100.yaml · Exploit
• https://github.com/waldhacker/ext-hcaptcha · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-41100 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-93wx-j2qv-49fg · Aviso do Fabricante
• https://typo3.org/security/advisory/typo3-ext-sa-2023-007 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-41100 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1694222506196926724 · Publicação no Twitter
• https://t.me/cibsecurity/69048 · Publicação no Telegram
• https://t.me/cvenotify/57141 · Publicação no Telegram