CVE-2019-16699

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

CVE-2019-16699

The CVE-2019-16699 issue affects the TYPO3 sr_freecap (freeCap CAPTCHA) extension, versions 2.4.5 and earlier and 2.5.2 and earlier. The root cause is improper sanitization of user input, which allows an attacker to trigger arbitrary Extbase actions and achieve Remote Code Execution (RCE). Public...