Captcha Protected Page
Monthly
Authentication bypass in the Drupal CAPTCHA Protected Page contributed module (versions before 1.0.2) allows unauthenticated network attackers to access pages that should be gated behind a CAPTCHA challenge by using an alternate access path or channel that circumvents the protection logic. The confidentiality impact is limited - only the content of the CAPTCHA-protected pages is exposed, and the CVSS high-complexity rating indicates the bypass requires specific conditions to execute. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog. A vendor patch is available at version 1.0.2.
Authentication bypass in the Drupal CAPTCHA Protected Page contributed module (versions before 1.0.2) allows unauthenticated network attackers to access pages that should be gated behind a CAPTCHA challenge by using an alternate access path or channel that circumvents the protection logic. The confidentiality impact is limited - only the content of the CAPTCHA-protected pages is exposed, and the CVSS high-complexity rating indicates the bypass requires specific conditions to execute. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog. A vendor patch is available at version 1.0.2.