Cryptographic Vulnerability in SourceCodester Corona Virus Tracker App for Android

CVE-2025-56608

What is CVE-2025-56608?

The SourceCodester Corona Virus Tracker App India version 1.0 utilizes an outdated cryptographic algorithm, MD5, for digest authentication. This implementation is susceptible to various attacks, including replay, spoofing, and brute-force, due to the inherent weaknesses in MD5, which is known for its vulnerability to hash collisions. As a result, unauthorized access may be gained, exposing sensitive user data. This vulnerability is classified under CWE-327 and aligns with OWASP M5 concerning insufficient cryptography practices. Ensuring the use of secure and updated cryptographic standards is critical for protecting user credentials.

References