CVE-2025-32352

creationtimestamp| type| source ---|---|--- 2025-04-05 05:37:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10595 2025-04-05 09:04:05+00:00| seen| https://t.me/cvedetector/22184 2025-04-05 12:10:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114285284931965571 2025-04-05...

CVE-2025-32352

A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords stored as MD5 hashes that can be interpreted as numbers. A solution requires moving from MD5 to bcrypt...

CVE-2025-32352

A type confusion vulnerability in lib/NSSAuthenticator.php in ZendTo before v5.04-7 allows remote attackers to bypass authentication for users with passwords stored as MD5 hashes that can be interpreted as numbers. A solution requires moving from MD5 to bcrypt...

CVE-2025-32352

ZendTo prior to version 5.04-7 contains a type confusion in lib/NSSAuthenticator.php that can allow remote attackers to bypass authentication for users whose passwords are stored as MD5 hashes that can be interpreted as numbers. The described remediation is to move from MD5 to bcrypt. Public refe...