Meon KYC Solutions Captcha Bypass Vulnerability
Vulnerability
A vulnerability allowing captcha bypass has been identified in Meon KYC solutions, version 1.1. This issue arises from inadequate server-side validation of captcha in certain API endpoints. A remote attacker could exploit this vulnerability by intercepting requests and removing the captcha parameter, thereby bypassing the captcha verification process.
Impact
Exploitation of this vulnerability could lead to unauthorized bypassing of captcha mechanisms, potentially allowing for automated submissions or actions that rely on captcha verification.
Remediation
Users are advised to upgrade Meon KYC Solutions to version 1.2.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.