CVE-2009-3818: freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature

medium Affects sjbr/sr-freecap. Feed 2026.10.29.3, updated 2026-10-29; published 2022-05-02; advisory modified 2025-04-10.

freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature

Package: sjbr/sr-freecap Composer
Affected versions: <1.2.2
Fixed in: 1.2.2
Severity: medium
Exploitation: not on CISA KEV · EPSS 1% (69.1th percentile)
Published: 2022-05-02
Source: osv.dev

References

NVD record sjbr/sr-freecap advisories

Am I affected?

Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# PHP projects (recommended)
composer require --dev phpwarden/phpwarden
# then
vendor/bin/phpwarden deps composer.lock

# or, without Composer
pipx install phpwarden   &&   phpwarden deps composer.lock

Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command

Install docs How findings are ranked

Related advisories

CVE-2019-16699 critical sr_freecap for Typo3 RCE Vulnerability same package: sjbr/sr-freecap
CVE-2009-2335 medium WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login atte also from 2009
CVE-2009-0815 medium TYPO3 leaks a hash secret in an error message also from 2009
CVE-2009-2762 high wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password re also from 2009
CVE-2009-3890 medium Unrestricted file upload vulnerability in the wp_check_filetype function in wp-includes/fu also from 2009
CVE-2009-2851 medium Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress befor also from 2009