CVE-2020-23355

7.5 highEPSS 1.0%Product not supported when assigned

High (7.5) in codiad codiad. EPSS 1.0% chance of exploitation in the next 30 days.

Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass. If encrypted or hash value for the passwords form certain formats of magic hash, e.g, 0e123, another hash value 0e234 something can successfully authenticate.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
Published: 2021-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

codiad:codiad

References

https://github.com/Codiad/Codiad/issues/1121
https://github.com/Codiad/Codiad/issues/1121

Check your stack JSON