GitHub Advisoryadvisory · Maven

GHSA-92wp-jghr-hh87 Weak encryption in Ninja Core

MEDIUM Published 2024-06-07 Modified 2024-06-07 Official page ↗
Aliases
CVE-2024-36823
Ecosystem
Maven
Packages
org.ninjaframework:ninja-core
Severity
Moderate
Weaknesses
CWE-326
Reviewed
2024-06-07

Affected packages

• Maven org.ninjaframework:ninja-core: 7.0.0 (no fix yet)

Description

The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information.

Related

Alias · CVE (1)

  • CVE-2024-36823 The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of… vulnerability

Weakness · CWE (1)

  • CWE-326 Inadequate Encryption Strength weakness

References