Drawing-Captcha/Drawing-Captcha-APP

Drawing-Captcha/Drawing-Captcha-APP

www.drawing-captcha.com

Releases9

Frequency2 weeks 2 days

Last Release 8 months ago

Stars6

Interactive, self-hosted CAPTCHA – a privacy-friendly alternative to reCAPTCHA (Alpha)

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-62428 ↗	Oct 16, 2025Thursday, 16 October 2025, 19:15	—	—
Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation links. These links can redirect users to attacker-controlled domains. This vulnerability affects all users relying on email confirmation for account registration or verification. This vulnerability is fixed in 1.2.5-alpha-patch.