CVE-2019-7649

2019-02-1721:29:00

Google

osv.dev

7.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.1%

global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing.

CPENameOperatorVersion
cmswingeq1.3.3
cmswingeq1.3.7
cmswingeq1.3.6
cmswingeq1.0.0
cmswingeq1.3.1
cmswingeq77
cmswingeq1.1.0

Name	Operator	Version
cmswing	eq	1.3.3
cmswing	eq	1.3.7
cmswing	eq	1.3.6
cmswing	eq	1.0.0
cmswing	eq	1.3.1
cmswing	eq	77
cmswing	eq	1.1.0

References

github.com/arterli/CmsWing/issues/41