PT-2025-11288

CVE-2025-26312

·

Published

2025-03-14

·

Updated

2025-03-14

Description by

CVSS 4.0
5.3
Medium
MetricsAV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions: SendQuick Entera versions prior to 11HF5
Description: The issue allows for CAPTCHA bypass via the captcha parameter.
Recommendations: For versions prior to 11HF5, consider disabling the CAPTCHA functionality until a patch is available. Restrict access to the captcha parameter to minimize the risk of exploitation.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-472: External Control of Assumed-Immutable Web Parameter
Related identifiers
CVE-2025-26312
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com