GHSA-8fhh-hf9w-55p7HighCVSS 7.5
Codiad Vulnerable to PHP Magic Hash Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass. If encrypted or hash value for the passwords form certain formats of magic hash, e.g, 0e123, another hash value 0e234[something] can successfully authenticate.
🎯 Affected products1
- composer/codiad/codiad:<= 2.8.4