PT-2025-13123
CVE-2025-30862
·
Published
2025-03-27
·
Updated
2025-03-27
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
reCAPTCHA for all versions n/a through 2.22
Description
The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Cross Site Request Forgery. This is a type of attack where an attacker tricks a user into performing unintended actions on a web application that the user is authenticated to.
Recommendations
For versions n/a through 2.22, update to a version that includes a fix for this issue, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider implementing additional CSRF protection measures, such as token-based validation, to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾