| Package | Affected versions | Patched versions |
|---|---|---|
| drupal | = 4.7= 4.7.1= 4.7.2= 4.7.3= 4.7.4= 4.7.5= 4.7.6= 4.7_rev1.15= 5.0= 5.1 | |
| textimage | = 4.7= 5.0 |
The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal allow remote attackers to bypass the CAPTCHA test via an empty captcha element in $_SESSION.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free