CVE-2018-18531

CVE-2018-18531 affects kaptcha_project kaptcha 2.3.2, where the CAPTCHA generation uses the insecure Random function instead of SecureRandom. This weakness, categorized as CWE-330, allows remote attackers to bypass access restrictions through brute-force attacks. The vulnerability carries a critical CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability with low attack complexity and no user interaction required. While no active exploitation, public exploit code, or significant community discussion has been observed, its high FAUCET Risk Score of 78/100 suggests a notable potential for exploitation.