CVE-2023-45292
Captcha verification bypass in github.com/mojocn/base64Captcha
Résumé
Captcha verification bypass in github.com/mojocn/base64Captcha
Description d'origine
La description telle que publiée par la source (souvent en anglais).
When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is true, the function will always consider the Captcha to be correct.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- report github.com
- web pkg.go.dev
- web pkg.go.dev