CVE-2023-41100
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
The hcaptcha extension (also known as hCaptcha for EXT:form) before version 2.1.2 for TYPO3 has an issue with verifying that the required CAPTCHA field is submitted in the form data, allowing a remote user to bypass the CAPTCHA check.
Risk Assessment
The organization may be exposed to spam attacks or other malicious activities due to the improper functioning of the CAPTCHA verification.
Recommendation
It is recommended to update the hcaptcha extension to version 2.1.2 or later to mitigate this vulnerability.
Original NVD description (English source)
An issue was discovered in the hcaptcha (aka hCaptcha for EXT:form) extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check.