Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5cwm-9hm2-r3cf

Опубликовано: 29 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insufficiently strong hashing algorithm on the CAPTCHA secret that is also displayed to the user via a cookie.

The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insufficiently strong hashing algorithm on the CAPTCHA secret that is also displayed to the user via a cookie.

EPSS

Процентиль: 23%
0.00077
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-326
CWE-804
CWE-863

Связанные уязвимости

CVSS3: 5.3
nvd
около 3 лет назад

The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insufficiently strong hashing algorithm on the CAPTCHA secret that is also displayed to the user via a cookie.

EPSS

Процентиль: 23%
0.00077
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-326
CWE-804
CWE-863