CVE-2026-107829

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-107829
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-107829.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-107829
Published
2026-10-08T21:51:33Z
Modified
2026-10-10T02:47:28Z
Severity
  • 8.2 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql
Details

Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-916"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-107829.json"
}
References

Affected packages

Git / github.com/banq/jivejdon

Affected ranges

Type
GIT
Repo
https://github.com/banq/jivejdon
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
910fafbfa718d0a2be6bb034fa02bcbb580bd731
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.0"
        },
        {
            "fixed": "5.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-107829.json"