CVE-2024-23091

Name of the Vulnerable Software and Affected Versions HotelDruid versions prior to 1.32

Description The issue is related to weak password hashing using MD5 in the funzioni.php file. This weakness allows an attacker to obtain plaintext passwords from hash values.

Recommendations For HotelDruid versions prior to 1.32, update to version 1.32 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.