Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6g49-7hrc-9j92

Опубликовано: 04 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha response, allowing them to capture the correct captcha value through error messages.

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha response, allowing them to capture the correct captcha value through error messages.

EPSS

Процентиль: 44%
0.0022
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 5.3
nvd
больше 1 года назад

ZZCMS 2023 contains a vulnerability in the captcha reuse logic located in /inc/function.php. The checkyzm function does not properly refresh the captcha value after a failed validation attempt. As a result, an attacker can exploit this flaw by repeatedly submitting the same incorrect captcha response, allowing them to capture the correct captcha value through error messages.

EPSS

Процентиль: 44%
0.0022
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-287