CVE-2020-25987

Name of the Vulnerable Software and Affected Versions MonoCMS Blog version 1.0

Description The issue concerns the storage of hard-coded admin hashes in the log.xml file within the source files of MonoCMS Blog. The hashes are of type bcrypt, and it is possible to use hashcat mode 3200 to crack them.

Recommendations For MonoCMS Blog version 1.0, consider removing or securely storing the hard-coded admin hashes in the log.xml file to prevent unauthorized access. As a temporary workaround, restrict access to the log.xml file to minimize the risk of exploitation.