Weak Password Hashing Vulnerability in HotelDruid by HotelDruid

CVE-2024-23091

What is CVE-2024-23091?

A vulnerability exists in HotelDruid due to the use of weak password hashing mechanisms, specifically the MD5 algorithm in the funzioni.php file. This design flaw in versions earlier than 1.32 allows attackers to exploit the hashing process, enabling them to convert hash values back to their original plaintext passwords. This poses significant security risks, as attackers can easily access sensitive user credentials. Organizations using affected versions should transition to stronger hashing algorithms and implement comprehensive password security measures to mitigate potential threats.

References