5 matches found
CVE-2018-18531
text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random rather than SecureRandom function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictio...
CVE-2019-18531
CVE-2019-18531 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-18531
CVE-2017-18531 corresponds to a cross-site scripting flaw in the WordPress Raygun4WP plugin. Affects the plugin prior to version 1.8.3 for WordPress, with the vulnerability located in the plugin settings handling. Exploitation could allow an attacker to inject and execute arbitrary scripts in the...
CVE-2018-18531
text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random rather than SecureRandom function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictio...