|
|
Log in / Subscribe / Register

python-tgcaptcha2: reusable captchas

Package(s):python-tgcaptcha2 CVE #(s):
Created:April 25, 2016 Updated:April 27, 2016
Description: From the Red Hat bugzilla:

If an attacker stores a captcha and its hidden value, they can reuse that same captcha an unlimited amount of time for as long as it's valid.

Version-Release number of selected component (if applicable): python-tgccaptcha2-0.2.0-1

How reproducible: Consistent

Steps to Reproduce:
1. Get one captcha value and store the hidden value and solves answer
2. Submit those values twice

Actual results: Both times are accepted.

Expected results: The second time should be refused.

Alerts:
Fedora FEDORA-2016-5f44e89fe0 python-tgcaptcha2 2016-04-24
Fedora FEDORA-2016-d7dafbf27f python-tgcaptcha2 2016-04-24

to post comments


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds