PT-2025-42541

Name of the Vulnerable Software and Affected Versions Drawing-Captcha APP versions prior to 1.2.5-alpha-patch Description Drawing-Captcha APP is susceptible to a Host Header Injection affecting the /register and /confirm-email API endpoints. An attacker can manipulate the Host header in HTTP...

CVE-2025-62428: URL Redirection to Untrusted Site

Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation...

Drawing-Captcha APP 输入验证错误漏洞

Drawing-Captcha APP is a captcha application from Drawing Captcha open source. An input validation error vulnerability exists in Drawing-Captcha APP that stems from the presence of host header injection in the /register and /confirm-email endpoints, which could result in users being redirected to...