-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
The vulnerability stems from missing captcha validation in form submissions. In TYPO3's form framework, custom validators like FriendlyCaptchaValidator are responsible for field validation. The description explicitly states the extension failed to check the captcha field requirement, which aligns with a missing validation check in the validator's validate() method. This is the standard implementation pattern for TYPO3 form validators, making this the most likely vulnerable component despite the absence of explicit code examples.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| studiomitte/friendlycaptcha | composer | < 0.1.4 | 0.1.4 |
Ongoing coverage of React2Shell