CVE-2024-38873

{"id": "CVE-2024-38873", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2024-06-21T07:15:09.110", "references": [{"url": "https://typo3.org/security/advisory/typo3-ext-sa-2024-004", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in the friendlycaptcha_official (aka Integration of Friendly Captcha) extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha integration for the ext:form extension."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en la extensi\u00f3n amigablecaptcha_official (tambi\u00e9n conocida como Integraci\u00f3n de Friendly Captcha) antes de la versi\u00f3n 0.1.4 para TYPO3. La extensi\u00f3n no verifica el requisito del campo captcha en los datos del formulario enviado, lo que permite a un usuario remoto omitir la verificaci\u00f3n de captcha. Esto solo afecta la integraci\u00f3n de captcha para la extensi\u00f3n ext:form."}], "lastModified": "2024-07-03T02:05:21.267", "sourceIdentifier": "cve@mitre.org"}