Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

freeCap CAPTCHA Extension in TYPO3 Session Handling Flaw

CVE-2009-3818 · published 17 years ago
Summary

The freeCap CAPTCHA extension in TYPO3 is vulnerable to a security issue in its session handling. This means that an attacker may be able to exploit this flaw to gain unauthorized access to the system. TYPO3 users should update the freeCap CAPTCHA extension to the latest version to fix the issue.

What to do
  • Update sjbr sr-freecap to version 1.2.2.
Affected software
Ecosystem VendorProductAffected versions
composer sjbr sr-freecap < 1.2.2
Fix: upgrade to 1.2.2
– stanislas_rolland sr_freecap <= 1.2.0
0.1.0
0.2.0
0.2.2
0.2.3
0.3.0
0.3.1
0.3.2
0.3.3
0.4.0
0.4.1
0.4.2
12 more version ranges
cpe:2.3:a:stanislas_rolland:sr_freecap:*:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors.
Unspecified vulnerability in the session handling feature in freeCap CAPTCHA (sr_freecap) extension 1.2.0 and earlier for TYPO3 has unknown impact and attack vectors.
References
Severity
10.0 Critical
Exploitation
1% chance of attack within 30 days
Timeline
Published28 Oct 2009
Updated4 Nov 2026
First seen6 Mar 2026
Sources
GHSA-m8c5-5g3h-jjfg · GHSA
CVE-2009-3818 · NVD
Track software like this
Free during beta