CVE-2026-113667: CWE-116: Improper Encoding or Escaping of Output in apostrophecms apostrophe
Description
CVE-2026-113667 is a medium severity vulnerability in ApostropheCMS affecting certain CAPTCHA integrations. Prior to fixed versions, the Form add-on, login-recaptcha, and login-hcaptcha improperly encode or escape user-supplied CAPTCHA response tokens. This allows crafted tokens to smuggle request parameters and disrupt CAPTCHA verification and CAPTCHA-gated form or login flows. While automated probing for bypass is possible, successful CAPTCHA bypass or secret disclosure has not been confirmed. The issue is fixed in Form 1.5.5, login-recaptcha 1.2.1, and login-hcaptcha 1.3.0.
CVSS v4.0
Score 5.3medium
Affected software
apostrophecms
apostrophe
@apostrophecms
form
@apostrophecms
login-hcaptcha
@apostrophecms
login-recaptcha
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
ApostropheCMS's CAPTCHA integrations in the Form add-on, login-recaptcha, and login-hcaptcha prior to versions 1.5.5, 1.2.1, and 1.3.0 respectively, interpolate unencoded user-supplied response tokens into verification requests. This improper encoding or escaping (CWE-116) can allow crafted tokens to smuggle additional request parameters, disrupting CAPTCHA verification processes and potentially affecting CAPTCHA-gated forms or login flows. Although automated bypass attempts are possible, no confirmed successful bypass or secret disclosure has been established. The vulnerability has a CVSS 4.0 base score of 5.3 (medium severity).
Potential Impact
The vulnerability can disrupt CAPTCHA verification and CAPTCHA-gated form or login flows by allowing crafted tokens to smuggle request parameters. However, there is no confirmed evidence of successful CAPTCHA bypass or secret disclosure. The impact is limited to potential disruption rather than confirmed compromise.
Mitigation Recommendations
This vulnerability is fixed in Form add-on version 1.5.5, login-recaptcha version 1.2.1, and login-hcaptcha version 1.3.0. Users should upgrade to these versions or later to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-10-20T14:27:46.642Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad7a9902cdf04f6564bddbd
Added to database: 10/20/2026, 17:49:04 UTC
Last enriched: 10/20/2026, 18:03:29 UTC
Last updated: 10/20/2026, 19:06:08 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.