by Kastro
Paper/Archive/CVE-2024-51478

CVE-2024-51478

YesWiki yeswiki — Use of a Broken or Risky Cryptographic Algorithm in YesWiki

EPSS 0.4%public exploitCVSS 9.9
critical.is priorityof 100
46
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 31.3.313 × 206.3Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

YesWiki is a wiki system written in PHP. Prior to 4.4.5, the use of a weak cryptographic algorithm and a hard-coded salt to hash the password reset key allows it to be recovered and used to reset the password of any account. This issue is fixed in 4.4.5.

Affected

ProductAffectedFixed inSource
yeswiki< 4.4.5–CNA
yeswiki< 4.4.54.4.5CISA-ADP

Scores by source

GitHub_M (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refgithub.com/YesWiki/yeswiki/security/advisories/GHSA-4fvx-h823-38v3refgithub.com/YesWiki/yeswiki/commit/b5a8f93b87720d5d5f033a4b3a131ce0fb621dbcrefgithub.com/YesWiki/yeswiki/commit/e1285709f6f6a2277bd0075acf369f33cefd78f7