CVE-2019-16699

The sr_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-10-16

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Sr Freecap (Sr Freecap Project)

References

• https://extensions.typo3.org/extension/sr_freecap
• https://typo3.org/security/advisory/typo3-ext-sa-2019-018/