Approved changes feed: RSS · Atom

cpe:2.3:a:kaptcha_project:kaptcha:2.3.2:*:*:*:*:*:*:*

part: a version: 2.3.2 update: *

VendorKaptcha Project (a24835b2-903e-534e-b652-1cbffb51e02d)
ProductKaptcha (82938938-caf6-56ae-80b8-2d58386d87a9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/youkol/kaptcha purl2cpe 2026-06-01 10:11:45.850006
pkg:github/zxyle/kaptcha purl2cpe 2026-06-01 10:11:45.850009
pkg:maven/dev.zhengxiang/kaptcha purl2cpe 2026-06-01 10:11:45.850012

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-18531 vulnerable 2026-06-08 05:11:14.212356 Details available
text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random (rather than SecureRandom) function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force approach.
Published: 2018-10-19T20:00:00.000Z
Updated: 2024-09-17T04:10:30.464Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.