Skip to content
OpenAdvisories
High · 7.5 CVE-2020-23355 EUVD-2022-3169GHSA-8fhh-hf9w-55p7

Codiad Vulnerable to PHP Magic Hash Vulnerability

Published Jan 27, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass. If encrypted or hash value for the passwords form certain formats of magic hash, e.g, 0e123, another hash value 0e234 something can successfully authenticate.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist codiad/codiad <= 2.8.4 — GHSA-8fhh-hf9w-55p7

References