id: PYSEC-2024-99
modified: 2024-10-01T21:22:35.777428Z
published: 2024-09-25T15:15:00Z
aliases:
- CVE-2024-22892
details: OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to
  store passwords.
affected:
- package:
    ecosystem: PyPI
    name: openslides
    purl: pkg:pypi/openslides
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
  versions:
  - "1.3"
  - 1.3-rc1
  - 1.3.1
  - "1.4"
  - 1.4.1
  - 1.4.2
  - "1.5"
  - 1.5.1
  - "1.6"
  - 1.6.1
  - "1.7"
  - "2.0"
  - "2.1"
  - 2.1.1
  - 2.1b1
  - 2.1b2
  - 2.1b3
  - 2.1b4
  - "2.2"
  - 2.2b1
  - 2.2b2
  - 2.2b3
  - "2.3"
  - 2.3b1
  - "3.0"
  - "3.1"
  - "3.2"
  - "3.3"
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
references:
- type: WEB
  url: https://gist.github.com/mdickopp/0cab0d7f91b1f4ea0d326dd976db70e5