CVE-2024-34914

The php-censor CI server (version v2.1.4 ) is vulnerable to a Weak Hashing Algorithm affecting the remember_key value. The root cause is that the rememberKey is generated using only the MD5 hash of the login timestamp without adding any salt or randomness. This allows attackers to brute-force the...