Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-36823. PoCs published by JAckLosingHeart.
AI-analyzed exploit summary The repository contains only a README.md file with a link to a GitHub issue, providing no functional exploit code or technical details about CVE-2024-36823.
Description
The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information.
Exploits (1)
nomisec
STUB
by JAckLosingHeart · poc
https://github.com/JAckLosingHeart/CVE-2024-36823-POC
The repository contains only a README.md file with a link to a GitHub issue, providing no functional exploit code or technical details about CVE-2024-36823.
Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target:
unknown
No auth needed
devstral-2 · analyzed Feb 18, 2026
Full analysis →
References (1)
Core 1
Core References
Issue Tracking
https://github.com/ninjaframework/ninja/issues
Scores
CVSS v3
7.5
EPSS
0.1182
EPSS Percentile
93.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-327
CWE-326
Status
published
Products (2)
ninjaframework/ninja
7.0.0
org.ninjaframework/ninja-core
Maven
Published
Jun 06, 2024
Tracked Since
Feb 18, 2026