CVE-2024-38873: TYPO3 Friendlycaptcha Official

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in the friendlycaptcha_official (aka Integration of Friendly Captcha) extension before 0.1.4 for TYPO3. The extension fails to check the requirement of the captcha field in submitted form data, allowing a remote user to bypass the captcha check. This only affects the captcha integration for the ext:form extension.

Affected products

• TYPO3 Friendlycaptcha Official: up to and including 0.1.3

Published 2024-06-21. Last modified 2026-06-17.