Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-38873 EUVD-2024-2090GHSA-jg62-h7pv-hxgv

FriendlyCaptcha Plugin for TYPO3 Captcha Check Bypass

Published Jun 21, 2024 · Updated Mar 14, 2025 · Assigned by mitre

Description

An issue was discovered in the friendlycaptcha_official (aka Integration of Friendly Captcha) extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha integration for the ext:form extension.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist studiomitte/friendlycaptcha < 0.1.4 0.1.4 GHSA-jg62-h7pv-hxgv

References