Skip to main content

Use of a Broken or Risky Cryptographic Algorithm

CVE-2024-55885

Medium
6.9/10

Summary

The beego is an open-source web framework for the Go programming language. In beego it uses "MD5" as a hashing algorithm. "MD5" is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. This issue is fixed by replacing MD5 with SHA256. This vulnerability affects github.com/beego/beego package versions prior to 2.3.4.

  • LOW
  • NETWORK
  • NONE
  • NONE

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information.

References

Advisory Timeline

  • Published