Threats tagged 'ghsa-49q7-xccc-p35m'

CFNext versions before 3.1.0 have a cryptographic vulnerability where subscription UUIDs are generated as an MD5 hash of the admin password combined with a fixed public salt. This weak derivation allows holders of subscription links to perform offline brute-force attacks to recover the admin password without rate limiting. Successful exploitation enables unauthorized access to the admin panel and exposure of sensitive secrets including Trojan, Clash, Telegram, and Cloudflare API credentials.