← Back

Kaptcha Project

kaptcha_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Kaptcha
kaptcha
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-18531
1Kaptcha Project
1Kaptcha
Nov 21, 2024
Oct 19, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random (rather than SecureRandom) function for generating CAPTCHA values,...Show more
text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random (rather than SecureRandom) function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force approach.Show less