by Kastro
Paper/Archive/CVE-2022-1252

CVE-2022-1252

gnuboard gnuboard/gnuboard5 — Use of a Broken or Risky Cryptographic Algorithm in gnuboard/gnuboard5

EPSS 0.5%CVSS 9.1
critical.is priorityof 100
37
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 45.8.458 × 209.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A vulnerability in gnuboard v5.5.5 and below uses weak encryption algorithms leading to sensitive information exposure. This allows an attacker to derive the email address of any user, including when the 'Let others see my information.' box is ticked off. Or to send emails to any email address, with full control of its contents

Affected

ProductAffectedFixed inSource
gnuboard/gnuboard5unspecified – 5.5.5–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
@huntrdev (CNA)8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

References

refhuntr.dev/bounties/c8c2c3e1-67d0-4a11-a4d4-11af567a9ebbref0g.vc/posts/insecure-cipher-gnuboard5