CVE-2023-40173CWE-522

Unsalted passwords in fobybus/social-media-skeleton

High · published August 18, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
50.9
In the wild
Unconfirmed
What it is

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an attacker gain access to hashed passwords. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this issue.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00659 · 50.9th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2023-08-18T21:47Z
EPSS history
Timeline
  • 18 AUG 21:47Z
    Unsalted passwords in fobybus/social-media-skeleton
    cvelistv5