CVE-2024-55885

HIGH

beego < 2.3.4 - Use of a Broken or Risky Cryptographic Algorithm

Title source: llm
STIX 2.1

Description

beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3.4 replaces MD5 with SHA256.

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0034
EPSS Percentile 25.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-327 CWE-328
Status published
Products (3)
beego/beego < 2.3.4
beego/beego 0Go
beego/beego 0 - 2.3.4Go
Published Dec 12, 2024
Tracked Since Feb 18, 2026