CVE-2024-23091

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values

High · published July 30, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00399 · 33.0th percentile
Published
2024-07-30T00:00Z
EPSS history
Timeline
  • 30 JUL 00:00Z
    Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values
    cvelistv5