CVE-2023-45292
- Source
- https://cve.org/CVERecord?id=CVE-2023-45292
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-45292.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-45292
- Aliases
- Published
- 2023-12-11T21:51:16Z
- Modified
- 2026-10-21T02:30:37Z
- Summary
- Captcha verification bypass in github.com/mojocn/base64Captcha
- Details
-
When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is true, the function will always consider the Captcha to be correct.
- Database specific
{ "cna_assigner": "Go", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45292.json" }- References
-
- https://pkg.go.dev
- https://pkg.go.dev/vuln/GO-2023-2386
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45292.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-45292
- https://github.com/mojocn/base64Captcha/issues/120
- https://github.com/mojocn/base64Captcha/commit/5ab86bd6f333aad3936f912fc52b411168dcd4a7
- https://github.com/mojocn/base64Captcha/commit/9b11012caca58925f1e47c770f79f2fa47e3ad13
Affected packages
Git / github.com/mojocn/base64captcha
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mojocn/base64captcha
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:mojotv:base64captcha:*:*:*:*:*:go:*:*", "range": [ { "introduced": "0" }, { "fixed": "1.3.6" } ], "source": "CPE_RANGE" }, { "range": [ { "fixed": "5ab86bd6f333aad3936f912fc52b411168dcd4a7" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "9b11012caca58925f1e47c770f79f2fa47e3ad13" } ], "source": "REFERENCES_COMMIT" } ] }