fuel/core Crypt encryption compromised.
In fuel/core versions pior to 1.8.1, with the right knowledge, code, and GPU calculation power, Crypt encryption can be broken in minutes.
- Update to 1.8.1
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for fuel/core in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
In fuel/core versions pior to 1.8.1, with the right knowledge, code, and GPU calculation power, Crypt encryption can be broken in minutes.
This vulnerability may cause OS commands to be executed when you pass unvalidated image filenames containing specially crafted strings to the ImageMagick driver.
Check your installed stack and versions against the current vulnerability feeds.