Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-phpg-8jc8-gfvj

Опубликовано: 02 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 7.5

Описание

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks.

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks.

EPSS

Процентиль: 6%
0.00024
Низкий

6.9 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-327

Связанные уязвимости

CVSS3: 7.5
nvd
4 месяца назад

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily cracked with modern hardware, exposing user credentials to potential risks.

CVSS3: 7.5
fstec
5 месяцев назад

Уязвимость программного обеспечения управления транспортными перевозками AndSoft e-TMS, связанная с неверным ограничением имени пути к каталогу с использованием ненадежных криптографических алгоритмов, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 6%
0.00024
Низкий

6.9 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-327