CVE-2024-29886

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Serverpod is an app and web server, built for the Flutter and Dart ecosystem. An issue was identified with the old password hash algorithm that made it susceptible to rainbow attacks if the database was compromised. This vulnerability is fixed by 1.2.6.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-916

Affected software

No affected versions have been published.

Timeline

Published
Mar 27, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-298877.4Serverpod is an app and web server, built for the Flutter and Dart ecosystem. This bug bypassed the validation of TSL certificates on all noCVE-2024-298885.4Saleor is an e-commerce platform that serves high-volume companies. When using `Pickup: Local stock only` click-and-collect as a delivery meCVE-2024-298898.1GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability iCVE-2024-29898.8A vulnerability, which was classified as critical, has been found in Tenda FH1203 2.0.1.6. Affected by this issue is the function fromNatStaCVE-2024-298908.8DataLens is a business intelligence and data visualization system. A specifically crafted request allowed the creation of a special chart tyCVE-2024-298918.7ZITADEL users can upload their own avatar image and various image types are allowed. Due to a missing check, an attacker could upload HTML aCVE-2024-298924.9ZITADEL, open source authentication management software, uses Go templates to render the login UI. Under certain circumstances an action couCVE-2024-298936.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of ArgoCD starting from v2.4 have a bug where the ArgCVE-2024-298944.7Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 contain a residual cross-site scrCVE-2024-2989510.0Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows anCVE-2024-298967.5Astro-Shield is a library to compute the subresource integrity hashes for your JS scripts and CSS stylesheets. When automated CSP headers geCVE-2024-298974.9CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. It is possible for users with (delete) or (suppressrevision) o
CVE-2024-29886: Medium severity, CVSS 5.3 | Vulnix