Description
When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is true, the function will always consider the Captcha to be correct.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
github.com/mojocn/base64Captcha github.com/mojocn/base64Captcha
Default version status: unaffected
0 to < 1.3.6affected