vulnerability

Debian: CVE-2024-23091: hoteldruid -- security update

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:N/A:N)

Published

Jul 30, 2024

Added

May 15, 2025

Modified

Mar 30, 2026

Description

Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values.

no-fix-debian-deb-package

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.