Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q484-cvj5-x4fv

Опубликовано: 01 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which could lead to the compromise of plaintext passwords via offline attacks.

The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which could lead to the compromise of plaintext passwords via offline attacks.

EPSS

Процентиль: 34%
0.00139
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-311
CWE-916

Связанные уязвимости

CVSS3: 4.9
nvd
больше 3 лет назад

The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which could lead to the compromise of plaintext passwords via offline attacks.

EPSS

Процентиль: 34%
0.00139
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-311
CWE-916