Lucene search
Veracode Vulnerability DatabaseVERACODE:33070HistoryNov 23, 2021 - 8:30 a.m.
Content Spoofing
2021-11-2308:30:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
tusdotnet
content spoofing
vulnerability
sha-1
hash function
EPSS
0.001
Percentile
36.4%
tusdotnet is vulnerable to content spoofing. Remote attackers are able to conduct tampering attacks and alter the checksum which makes it possible to alter the file being uploaded itself. The vulnerability exists because tus client uses the SHA-1 hash function with weak collision resistance.
Affected configurations
Node
tusdotnetMatch1.2.0
ORtusdotnetMatch1.2.0
ORtusdotnetRange≤2.5.0
Related
nvd
nvd
CVE-2021-44150
2021-11-22 22:15:07
cvelist
cvelist
CVE-2021-44150
2021-11-22 21:51:56
osv
osv
CVE-2021-44150
2021-11-22 22:15:07
cve
cve
CVE-2021-44150
2021-11-22 22:15:07
github
github
Use of Sha-1 in tusdotnet
2021-11-29 18:09:08
prion
prion
Spoofing
2021-11-22 22:15:00