1157 matches found
CVE-2024-40761
Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommend...
CVE-2024-40761 Apache Answer: Avatar URL leaked user email addresses
Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommend...
CVE-2024-40761
Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommend...
CVE-2024-40761 Apache Answer: Avatar URL leaked user email addresses
Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommend...
CVE-2024-40761
The Apache Answer software (versions through 1.3.5 ) contains an Inadequate Encryption Strength vulnerability. The root cause is the use of MD5 hashing for a user's email when accessing Gravatar , which is insecure and can lead to the leakage of user email addresses . To remediate this issue, use...
CVE-2024-40761 Apache Answer: Avatar URL leaked user email addresses
Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommend...
Apache Answer 安全漏洞
Apache Answer is a community platform of the Apache USA Foundation. A security vulnerability exists in Apache Answer version 1.3.5 and prior versions, which stems from the fact that accessing Gravatar using the MD5 value of a user's email is insecure and could lead to the disclosure of the user's...
CVE-2024-40761: Inadequate Encryption Strength
Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommend...
PT-2024-29029 · Apache · Apache Answer
Name of the Vulnerable Software and Affected Versions: Apache Answer versions through 1.3.5 Description: The issue is related to inadequate encryption strength, where the MD5 value of a user's email is used to access Gravatar, leading to potential leakage of user email. The official recommendatio...
D-Link I2eye Video Conference AutoAnswer (WDBRPC)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'D-Link i2eye Video Conference AutoAnswer WDBRPC', 'Description' = %q This module can be used to enable auto-answer mode for the D-Link i2eye vide...
GO-2023-1996 Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer
Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer...
GO-2023-1774 Answer Missing Authorization vulnerability in github.com/answerdev/answer
Answer Missing Authorization vulnerability in github.com/answerdev/answer...
GO-2023-1661 Answer has Observable Timing Discrepancy in github.com/answerdev/answer
Answer has Observable Timing Discrepancy in github.com/answerdev/answer...
GO-2023-1660 Answer vulnerable to Business Logic Errors in github.com/answerdev/answer
Answer vulnerable to Business Logic Errors in github.com/answerdev/answer...
GO-2023-1659 Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer
Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer...
GO-2023-1655 Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer
Answer vulnerable to Insufficient Session Expiration in github.com/answerdev/answer...
GO-2023-1619 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1620 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...