CVE-2023-40173

    Dashboard / Vulnerabilities / CVE-2023-40173

    CVE-2023-40173

    Published: 18 Aug 2023Last Modified: 12 Aug 2026

    Summary: Unsalted passwords in fobybus/social-media-skeleton

    Details: Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Prior to version 1.0.5 Social media skeleton did not properly salt passwords leaving user passwords susceptible to cracking should an attacker gain access to hashed passwords. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this issue.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40173.json, https://github.com/fobybus/social-media-skeleton/security/advisories/GHSA-rfmv-7m7g-v628, https://nvd.nist.gov/vuln/detail/CVE-2023-40173, https://github.com/fobybus/social-media-skeleton/commit/344d798e82d6cc39844962c6d3cb2560f5907848, https://github.com/fobybus/social-media-skeleton/commit/df31da44ffed3ea065cbbadc3c8052d0d489a2ef

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -ea5d199c05fa2a0c1fafbfca44734676d2d9d851

    Affected versions

    1.0.4
    1.0.3

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-40173 | CVE-DB