PT-2024-40270 · Fuel/Core · Fuel/Core

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: fuel/core versions prior to 1.8.1

Description: The issue allows Crypt encryption to be broken in minutes with the right knowledge, code, and GPU calculation power.

Recommendations: For versions prior to 1.8.1, update to version 1.8.1 or later to resolve the issue.

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

GHSA-FGRX-4637-FCF5

Affected Products

Fuel/Core

References · 5

• https://osv.dev/vulnerability/GHSA-fgrx-4637-fcf5 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/fuel/core/2018-04-14-1.yaml · Note
• https://github.com/fuel/core · Note
• https://github.com/fuel/core/commit/59112c96d0a6f2b0ead6a57edd8ac465678bdcb0 · Note
• https://fuelphp.com/security-advisories · Note