python-tgcaptcha2: reusable captchas
| Package(s): | python-tgcaptcha2 | CVE #(s): | |||||||||
| Created: | April 25, 2016 | Updated: | April 27, 2016 | ||||||||
| Description: | From the Red Hat bugzilla:
If an attacker stores a captcha and its hidden value, they can reuse that same captcha an unlimited amount of time for as long as it's valid. Version-Release number of selected component (if applicable): python-tgccaptcha2-0.2.0-1 How reproducible: Consistent
Steps to Reproduce: Actual results: Both times are accepted. Expected results: The second time should be refused. | ||||||||||
| Alerts: |
| ||||||||||
