Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-40173

Опубликовано: 18 авг. 2023
Источник: nvd
CVSS3: 7.5
CVSS3: 7.5
EPSS Низкий

Описание

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an attacker gain access to hashed passwords. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this issue.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:fobybus:social-media-skeleton:*:*:*:*:*:*:*:*
Версия до 1.0.5 (исключая)

EPSS

Процентиль: 20%
0.00065
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-522

EPSS

Процентиль: 20%
0.00065
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-522