Skip to content
OpenAdvisories

Weakness (CWE)

CWE-804: Guessable CAPTCHA

Base Incomplete

The product uses a CAPTCHA challenge, but the challenge can be guessed or automatically recognized by a non-human actor.

Source: MITRE CWE-804

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2025-10423

    newbee-mall kaptcha mallKaptcha Captcha

    A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation results in guessable captcha. The attack can be executed remotely. A high complexity level is associated with this attack. Th…