CVE-2024-40761

Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. Using the MD5 value of a user's email to access Gravatar is insecure and can lead to the leakage of user email. The official recommendation is to use SHA256 instead. Users are recommended to upgrade to version 1.4.0, which fixes the issue.

• CWE-326

• https://lists.apache.org/thread/mmrhsfy16qwrw0pkv0p9kj40vy3sg08xMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2024/09/25/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/09/25/5Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/09/25/6Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/09/25/7Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/09/25/8Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/09/26/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/09/26/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/09/26/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/09/27/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/09/27/5Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/09/27/8Mailing List, Third Party Advisory

Published

Sep 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-40748Lack of output escaping in the id attribute of menu lists.7.5
• CVE-2024-40749Improper Access Controls allows access to protected views.7.5
• CVE-2024-4075A vulnerability classified as problematic has been found in …6.1
• CVE-2024-40750Linksys Velop Pro 6E 1.0.8 MX6200_1.0.8.215731 and 7 1.0.10.…5.3
• CVE-2024-40754Heap-based Buffer Overflow vulnerability in Samsung Open Sou…9.8
• CVE-2024-4076Client queries that trigger serving stale data and that also…7.5
• CVE-2024-40762Use of Cryptographically Weak Pseudo-Random Number Generator…9.8
• CVE-2024-40763Heap-based buffer overflow vulnerability in the SonicWall SM…7.5
• CVE-2024-40764Heap-based buffer overflow vulnerability in the SonicOS IPSe…7.5
• CVE-2024-40765An Integer-based buffer overflow vulnerability in the SonicO…9.8
• CVE-2024-40766An improper access control vulnerability has been identified…9.8
• CVE-2024-40767In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 be…6.5