GitHub Advisoryadvisory · npm
GHSA-wpxw-5xfm-x22v MeshCentral algorithm-downgrade issue
HIGH
Official page ↗
- Aliases
- CVE-2023-51842
- Ecosystem
- npm
- Packages
- meshcentral
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Reviewed
- 2024-01-29
Affected packages
• npm meshcentral: < 1.1.17 → fixed in 1.1.17
Description
An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16.
Related
Alias · CVE (1)
- CVE-2023-51842 An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16. vulnerability
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-51842 advisory
- https://github.com/Ylianst/MeshCentral/commit/a5efc5e899b8809293b297df045cff5ec0eb448b web
- https://github.com/Ylianst/MeshCentral package
- https://github.com/Ylianst/MeshCentral/tree/master web
- https://github.com/tianjk99/Cryptographic-Misuses/blob/main/Bug_MeshCentral.md web
- https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51842.md web