Information disclosure

2016-10-2514:29:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.2%

TGCaptcha2 version 0.3.0 is vulnerable to a replay attack due to a missing nonce allowing attackers to use a single solved CAPTCHA multiple times.

CPENameOperatorVersion
tgcaptcha2eq0.3.0

CPE	Name	Operator	Version
	tgcaptcha2	eq	0.3.0

References

bugzilla.redhat.com/show_bug.cgi?id=1316083

patrick.uiterwijk.org/2016/03/09/fedora-spam-dwf-2016-89000/