ninjaframework/ninja · Security
Weak encryption in Ninja Core
- GHSA ID
- GHSA-92wp-jghr-hh87
- CVE ID
- CVE-2024-36823
- Severity
- medium
- Published
- Updated
Description
The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information.
CWEs
- CWE-326 · Inadequate Encryption Strength