Mmastodon TechnologyCybersecurity first seen 17 h ago, last 17 h ago, peak #9

French CAPTCHA provider Captcha.eu flagged over unpatched SSRF flaws

Original: Captcha.eu (France) carries a C trust score with 100% of its 2 CVEs unpatched, including CWE-918 SSRF at CVSS 7.1. No CI

French bot-defense vendor Captcha.eu is drawing scrutiny over a low trust score, with both of its known CVEs reportedly unpatched, including a server-side request forgery flaw (CWE-918) rated 7.1 on the CVSS scale. Security commentary warns that an open SSRF issue in a component designed to block bots warrants assessment before websites embed the service, though neither vulnerability appears in CISA's known exploited vulnerabilities catalog.

Why now: A security researcher's warning that a widely embeddable CAPTCHA service has unpatched server-side request forgery vulnerabilities is prompting discussion among cybersecurity practitioners.

Captcha.euFranceCISA

Open on mastodon →

Evidence

• Captcha.eu (France) carries a C trust score with 100% of its 2 CVEs unpatched, including CWE-918 SSRF at CVSS 7.1. No CISA KEV hits, but an open SSRF in a bot-defense layer deserves a look before you embed it. https://www. valtersit.com/vendors/captchae u/ # cybersecurity #… · hugovalters

API: https://socialmediatrends-api.osmike.com/v1/trends/2062063