CVE-2024-55885
Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames
概要
Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3.4 replaces MD5 with SHA256.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com