TYPO3 hCaptcha Extension Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the hCaptcha for EXT:form TYPO3 extension, versions prior to 2.1.2. The issue arises because the extension does not properly verify that the required captcha field is included in the submitted form data. This oversight allows remote users to bypass the CAPTCHA validation.

Impact

Exploitation of this vulnerability allows for bypassing CAPTCHA checks, potentially leading to automated form submissions or other actions that rely on CAPTCHA for validation.

Remediation

Users are advised to update the hCaptcha for EXT:form TYPO3 extension to version 2.1.2, available through the TYPO3 extension manager, Packagist, or as a ZIP download from the TYPO3 extensions repository.