Lucene search
K

6 matches found

OSV
OSV
added 2022/05/24 4:58 p.m.7 views

GHSA-598P-RV6P-G7QC sr_freecap for Typo3 RCE Vulnerability

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

9.8CVSS9.8AI score0.02481EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/05/24 4:58 p.m.21 views

sr_freecap for Typo3 RCE Vulnerability

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

9.8CVSS7.6AI score0.02481EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2019/10/16 7:15 p.m.8 views

CVE-2019-16699

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

9.8CVSS9.8AI score0.02481EPSS
Exploits0References2
Prion
Prion
added 2019/10/16 7:15 p.m.11 views

Remote code execution

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

7.5CVSS9.6AI score0.02481EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/10/16 6:40 p.m.9 views

CVE-2019-16699

The srfreecap aka freeCap CAPTCHA extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution...

9.8AI score0.02481EPSS
Exploits0References2
CVE
CVE
added 2019/10/16 6:40 p.m.52 views

CVE-2019-16699

The CVE-2019-16699 issue affects the TYPO3 sr_freecap (freeCap CAPTCHA) extension, versions 2.4.5 and earlier and 2.5.2 and earlier. The root cause is improper sanitization of user input, which allows an attacker to trigger arbitrary Extbase actions and achieve Remote Code Execution (RCE). Public...

9.8CVSS9.7AI score0.02481EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder