CVE-2021-39182
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2021-39182
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-39182.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2021-39182
- Aliases
- Published
- 2021-11-08T15:15:07Z
- Modified
- 2024-10-12T08:19:54.094236Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of the product. As a workaround, users can remove the
MD5hashing function from the filehashing.py. - References
Affected packages
Git / github.com/metamorphic-spyware/enrocrypt
Affected ranges
- Type
- GIT
- Repo
- https://github.com/metamorphic-spyware/enrocrypt
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Type
- GIT
- Repo
- https://github.com/morgan-phoenix/enrocrypt
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed