3 matches found
CVE-2022-24880
flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a server side session. In versions prior to 1.2.1, he "captcha.validate" function would return "None" if passed no value e.g. by submitting an having an empty form. If implementing use...
PT-2022-16953
Name of the Vulnerable Software and Affected Versions flask-session-captcha versions prior to 1.2.1 Description The issue concerns the captcha.validate function in flask-session-captcha, which returns None if passed no value, such as when submitting an empty form. If users were checking the retur...
CVE-2022-24880: Incorrect Check of Function Return Value
flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a server side session. In versions prior to 1.2.1, he captcha.validate function would return None if passed no value e.g. by submitting an having an empty form. If implementing users...