PT-2014-4594 · Rock Lobster · Contact Form 7
CVE-2014-2265
·
Publicado
2014-03-14
·
Atualizado
2022-09-27
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Rock Lobster Contact Form 7 versions prior to 3.7.2
Description
The issue allows remote attackers to bypass the CAPTCHA protection mechanism and submit arbitrary form data by omitting the
wpcf7 captcha challenge captcha-719 parameter. This enables attackers to circumvent the security measure designed to prevent automated submissions.Recommendations
For versions prior to 3.7.2, update to version 3.7.2 or later to resolve the issue. As a temporary workaround, consider implementing additional validation measures for form submissions to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Contact Form 7