Threats tagged 'ghsa-rwxj-v6pm-xj2c'

A vulnerability exists in the sfturing hosp_order project affecting the MD5.getMD5 function in the User Password Handler component. The issue involves the use of a one-way hash without salt, which can weaken password security. Exploitation requires a high degree of complexity and is considered difficult. The vulnerability can be triggered remotely. No specific affected versions or patches are available due to the project's rolling release model. The project maintainers have not responded to the issue report. The CVSS score is low (3.1), reflecting limited impact.