What’s Vulnerable › Vulnerabilities

CVE-2019-16699

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-16 · updated 2026-06-17
• Weakness: CWE-20

Description

The sr_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution.

Affected products

• Sr Freecap Project Sr Freecap: from 2.4.0 through 2.4.5; from 2.5.0 through 2.5.2

References

• https://extensions.typo3.org/extension/sr_freecap
• https://typo3.org/security/advisory/typo3-ext-sa-2019-018/
• https://extensions.typo3.org/extension/sr_freecap
• https://typo3.org/security/advisory/typo3-ext-sa-2019-018/

Get alerted when CVE-2019-16699 or the next vulnerability affects your stack