Extension Accessible Form Captcha
Monthly
CAPTCHA bypass in the TYPO3 accessible_form_captcha extension allows automated clients to defeat the challenge by extracting the correct answer from the CAPTCHA image data, because the audio accessibility feature that embeds the answer is enabled by default. Any TYPO3 form that relies on this extension as its sole anti-automation control is exposed to bot-driven abuse; impact is limited to integrity of the CAPTCHA check (no data disclosure or service disruption), and no public exploit code was identified at time of analysis. The flaw is rated moderate severity (CVSS 3.1: 6.9, AV:N/AC:L/PR:N/UI:N with I:L only).
CAPTCHA bypass in the TYPO3 accessible_form_captcha extension allows automated clients to defeat the challenge by extracting the correct answer from the CAPTCHA image data, because the audio accessibility feature that embeds the answer is enabled by default. Any TYPO3 form that relies on this extension as its sole anti-automation control is exposed to bot-driven abuse; impact is limited to integrity of the CAPTCHA check (no data disclosure or service disruption), and no public exploit code was identified at time of analysis. The flaw is rated moderate severity (CVSS 3.1: 6.9, AV:N/AC:L/PR:N/UI:N with I:L only).