CVE-2021-39182
High
Description
EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of the product. As a workaround, users can remove the `MD5` hashing function from the file `hashing.py`.
SeverityHigh
CVSS7.5
Exploit probability—
ProductEnrocrypt
PublishedNov 8, 2021
First seenNov 8, 2021
Weakness typeCWE-327CWE-327CWE-328CWE-328CWE-916CWE-916
How to fix
Update
- enrocrypt_project enrocrypt1.1.4 or later
- enrocrypt1.1.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| enrocrypt_project enrocrypt | v < 1.1.4 | 1.1.4 |
| enrocryptPyPI | v < 1.1.4 | 1.1.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.