CVE-2023-45292

Katalog CVE

CVSS 5.3 · Medium EPSS 0,30%

Kerentanan Insufficient Verification of Data Authenticity pada mojotv base64captcha. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is true, the function will always consider the Captcha to be correct.

Rincian

Terbit di NVD

11 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-345: Insufficient Verification of Data Authenticity

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 20,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/mojocn/base64Captcha/commit/5ab86bd6f333aad3936f912fc52b411168dcd4a7 patch
• https://github.com/mojocn/base64Captcha/commit/9b11012caca58925f1e47c770f79f2fa47e3ad13 patch
• https://pkg.go.dev/vuln/GO-2023-2386 advisory pihak ketiga
• https://github.com/mojocn/base64Captcha/issues/120 exploit · issue tracking