Lucene search
+L

3 matches found

Mend
Mend
•added 2022/04/25 10:10 p.m.•3 views

CVE-2022-24880

flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a server side session. In versions prior to 1.2.1, he "captcha.validate" function would return "None" if passed no value e.g. by submitting an having an empty form. If implementing use...

6.9CVSS0.01206EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2022/04/25 12:00 a.m.•7 views

PT-2022-16953

Name of the Vulnerable Software and Affected Versions flask-session-captcha versions prior to 1.2.1 Description The issue concerns the captcha.validate function in flask-session-captcha, which returns None if passed no value, such as when submitting an empty form. If users were checking the retur...

6.9CVSS0.01206EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/25 12:00 a.m.•6 views

CVE-2022-24880: Incorrect Check of Function Return Value

flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a server side session. In versions prior to 1.2.1, he captcha.validate function would return None if passed no value e.g. by submitting an having an empty form. If implementing users...

5.3CVSS5.9AI score0.01206EPSS
SaveExploits0References5
Rows per page
Query Builder