CVE-2026-50787

Name of the Vulnerable Software and Affected Versions e-SIC Livre versions prior to 0.2.3

Description An uncontrolled resource consumption issue exists in the restrito/inc/captcha.php endpoint. The application fails to validate user-supplied parameters l, a, tf, and ql used to generate CAPTCHA images. This allows remote attackers to trigger a denial of service by causing excessive CPU and memory consumption.

Recommendations Update e-SIC Livre to a version newer than 0.2.2. As a temporary mitigation, restrict access to the restrito/inc/captcha.php endpoint or validate the l, a, tf, and ql parameters to prevent excessive resource allocation.