AIKIDO-2024-10241
webdav-servlet is vulnerable to Use of Weak Hash
23
Low Risk
This Affects:
webdav-servletTL;DR
Affected versions of the package use the MD5 algorithm, which generates digests that fail to meet security standards for a hash function. This weakness allows adversaries to feasibly determine the original input.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
webdav-servlet is vulnerable to Use of Weak Hash in versions 1.0.0 - 1.2.69.
How to fix this
Upgrade the nl.info.webdav:webdav-servlet library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.