Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2024-55885

Beego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames

Description

beego is an open-source web framework for the Go programming language. Versions of beego prior to 2.3.4 use MD5 as a hashing algorithm. MD5 is no longer considered secure against well-funded opponents due to its vulnerability to collision attacks. Version 2.3.4 replaces MD5 with SHA256.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

beego beego

  • < 2.3.4affected

References