title: Captcha verification bypass in github.com/mojocn/base64Captcha
description: When using the default implementation of Verify to check a Captcha, verification can be bypassed. For example, if the first parameter is a non-existent id, the second parameter is an empty string, and the third parameter is true, the function will always consider the Captcha to be correct.
problem types: CWE-305: Authentication Bypass by Primary Weakness
affected:
{
vendor: github.com/mojocn/base64Captcha
product: github.com/mojocn/base64Captcha
collectionURL: https://pkg.go.dev
packageName: github.com/mojocn/base64Captcha
versions:
version: 0, lessThan: 1.3.6, status: affected, versionType: semver
programRoutines:
name: memoryStore.Verify
defaultStatus: unaffected
}