Lucene search
K

4 matches found

Veracode
Veracode
added 2023/12/12 5:57 a.m.15 views

Captcha Verification Bypass

base64Captcha is vulnerable to Captcha Verification Bypass. The vulnerability is due to improper verification of captcha wherein, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is set to true, the function will always consider the...

5.3CVSS6.7AI score0.00084EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2023/12/12 12:30 a.m.21 views

Always incorrect control flow in github.com/mojocn/base64Captcha

When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is true, the function will always consider the Captcha to be correct...

5.3CVSS7.1AI score0.00084EPSS
Exploits1References6Affected Software1
CNNVD
CNNVD
added 2023/12/11 12:0 a.m.4 views

base64Captcha Security Vulnerability

base64Captcha is a flexible and diverse CAPTCHA package for mojocn individual developers. A security vulnerability exists in base64Captcha that stems from the ability to bypass validation when checking CAPTCHA using Verify's default configuration...

5.3CVSS6.8AI score0.00084EPSS
Exploits1References5
OSV
OSV
added 2023/12/08 8:11 p.m.15 views

GO-2023-2386 Captcha verification bypass in github.com/mojocn/base64Captcha

When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is true, the function will always consider the Captcha to be correct...

5.3CVSS5.1AI score0.00084EPSS
Exploits1References3
Rows per page
Query Builder