CVE-2026-3214
CAPTCHA - Moderately critical - Access bypass - SA-CONTRIB-2026-015
Résumé
CAPTCHA - Moderately critical - Access bypass - SA-CONTRIB-2026-015
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass.This issue affects CAPTCHA: from 0.0.0 before 1.17.0, from 2.0.0 before 2.0.10.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/captcha
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.0"}],"database_specific":{"constraint":"<1.17.0"}},{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.0.10"}],"database_specific":{"constraint":">=2.0.0 < 2.0.10"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org