CVE-2024-40761

creationtimestamp| type| source ---|---|--- 2024-09-25 10:58:16+00:00| seen| https://t.me/cvedetector/6300...

CVE-2024-40761

The Apache Answer software (versions through 1.3.5 ) contains an Inadequate Encryption Strength vulnerability. The root cause is the use of MD5 hashing for a user's email when accessing Gravatar , which is insecure and can lead to the leakage of user email addresses . To remediate this issue, use...

CVE-2024-40761 Apache Answer: Avatar URL leaked user email addresses

Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommend...

CVE-2024-40761 Apache Answer: Avatar URL leaked user email addresses

Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommend...