GHSA-5r5w-h76p-m726

ghsaUSosv

Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy

view advisory published 2022-01-06Licence: CC-BY-4.0

A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-42583US	high7.5OT elevated	0.75% (55th)	—	2021-12-28
A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information.

references

External citations — patches, advisories, analysis.

https://github.com/foxcpp/maddyPACKAGE
https://github.com/foxcpp/maddy/blob/df40dce1284cd0fd0a9e8e7894029553d653d0a5/internal/auth/shadow/verify.goWEB
https://github.com/foxcpp/maddy/releases/tag/v0.5.2WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-42583ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan