CVE-2024-55885
Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames
Résumé
Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames
Description d'origine
La description telle que publiée par la source (souvent en anglais).
beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3.4 replaces MD5 with SHA256.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com