Threats tagged 'ghsa-8v62-pfpx-v4wp'

A security vulnerability exists in SiteServer SSCMS versions up to 7.2.2 involving the /api/v1/captcha endpoint. Manipulating the argument 'Value' leads to inadequate encryption strength. The flaw can be exploited remotely without authentication. Public exploit code is available. The vendor has not responded to the disclosure.