CVE-2024-34914
1 advisory.
Packagist/php-censor/php-censor CVE-2024-34914: medium 6.5, EPSS 0.28%
PHP Censor uses a weak hashing algorithm for the remember me key
Action: Upgrade php-censor/php-censor to 2.0.13 or later.
composer require php-censor/php-censor:2.1.5composer require php-censor/php-censor:2.0.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 2.1.5 | - |
| 0 | 2.0.13 | - |
Fixed versions
| 2.1.5 | 2.0.13 |
Sources
- osv: GHSA-fqw7-839j-hvxj
- https://nvd.nist.gov/vuln/detail/CVE-2024-34914
- https://github.com/php-censor/php-censor/commit/7b011d1b60f543e6ed814315a285cc80074d12e5
- https://chmod744.super.site/redacted-vulnerability
- https://github.com/php-censor/php-censor
CVE-2024-34914 · published · modified · JSON