4 matches found
CVE-2021-3680
showdoc is vulnerable to Missing Cryptographic Step...
5.3CVSS6.8AI score0.0046EPSS
SaveExploits1References1
CVE-2021-3680
showdoc is vulnerable to Missing Cryptographic Step...
4.9CVSS6.7AI score
SaveExploits0References2
CVE-2021-3680
CVE-2021-3680 relates to showdoc and centers on a missing cryptographic step due to a hardcoded salt in the user password hash function. Documents from GHSA-8VH3-29MR-M9XG and PT-2021-21367 confirm this flaw and describe the use of a fixed salt, implying weaknesses in password hashing. No concret...
5.3CVSS5AI score0.0046EPSS
SaveExploits1References2Affected Software1
20