GitHub Advisoryadvisory · Packagist

GHSA-4wgf-9x5r-p938 Weak Cryptography in PHP-Proxy

HIGH Published 2022-05-13 Modified 2023-07-06 Official page ↗
Aliases
CVE-2018-19784
Ecosystem
Packagist
Packages
athlon1600/php-proxy
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-326
Reviewed
2023-07-06

Affected packages

• Packagist athlon1600/php-proxy: <= 5.1.0 (no fix yet)

Description

The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.

Related

Alias · CVE (1)

  • CVE-2018-19784 The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier… vulnerability

Weakness · CWE (1)

  • CWE-326 Inadequate Encryption Strength weakness

References