GHSA-8fhh-hf9w-55p7HighCVSS 7.5

Codiad Vulnerable to PHP Magic Hash Vulnerability

Published
May 24, 2022
Last Modified
April 25, 2024

🔗 CVE IDs covered (1)

📋 Description

Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass. If encrypted or hash value for the passwords form certain formats of magic hash, e.g, 0e123, another hash value 0e234[something] can successfully authenticate.

🎯 Affected products1

  • composer/codiad/codiad:<= 2.8.4

🔗 References (4)