CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2021-42583
High (7.5) in foxcpp maddy. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in github.com/foxcpp/maddy 0.5.2.
A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
- CWE
- CWE-327
- Published
- Modified
- Record from
- the NVD, synced
Affected
- foxcpp:maddy
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-5r5w-h76p-m726 | Go | github.com/foxcpp/maddy | <0.5.2 | 0.5.2 |
| GO-2022-0306 | Go | github.com/foxcpp/maddy | <0.5.2 | 0.5.2 |
References
- https://github.com/foxcpp/maddy/blob/df40dce1284cd0fd0a9e8e7894029553d653d0a5/internal/auth/shadow/verify.go
- https://github.com/foxcpp/maddy/releases/tag/v0.5.2
- https://github.com/foxcpp/maddy/blob/df40dce1284cd0fd0a9e8e7894029553d653d0a5/internal/auth/shadow/verify.go
- https://github.com/foxcpp/maddy/releases/tag/v0.5.2