CVE-2023-40173
Unsalted passwords in fobybus/social-media-skeleton
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Unsalted passwords in fobybus/social-media-skeleton
| Assigner | GitHub_M |
| Reserved | 2023-08-09 |
| Published | 2023-08-18 |
| Updated | 2024-10-02 |
Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an attacker gain access to hashed passwords. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this issue.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
CWE-522: Insufficiently Protected Credentials
https://github.com/fobybus/social-media-skeleton/security/advisories/GHSA-rfmv-7m7g-v628
https://github.com/fobybus/social-media-skeleton/commit/344d798e82d6cc39844962c6d3cb2560f5907848
https://github.com/fobybus/social-media-skeleton/commit/df31da44ffed3ea065cbbadc3c8052d0d489a2ef
