CVE-2023-45292
Captcha verification bypass in github.com/mojocn/base64Captcha
Summary
Captcha verification bypass in github.com/mojocn/base64Captcha
Original description
The description as published by the source.
When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is true, the function will always consider the Captcha to be correct.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- report github.com
- web pkg.go.dev
- web pkg.go.dev