BaseFortify

Publication date: 2025-12-10

Last updated on: 2025-12-30

Assigner: MITRE

Description

The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker obtained a copy of these hashes, either through exploiting cloud services, performing TLS downgrade attacks on the traffic from a mobile device, or through another means, they may be able to crack the hash in a reasonable amount of time and gain unauthorized access to the victim's account.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-10

Last Modified

2025-12-30

Generated

2026-07-06

AI Q&A

2025-12-10

EPSS Evaluated

2026-07-05

NVD

CVE-2025-65831

Affected Vendors & Products

Vendor	Product	Version / Range
meatmeet	meatmeet	1.1.2.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-327	The product uses a broken or risky cryptographic algorithm or protocol.

Attack-Flow Graph

Executive Summary

This vulnerability involves the use of an insecure hashing algorithm, MD5, to hash passwords. Because MD5 is weak, if an attacker obtains these hashed passwords—by exploiting cloud services, performing TLS downgrade attacks on mobile device traffic, or other methods—they can potentially crack the hashes quickly and gain unauthorized access to user accounts.

Impact Analysis

If exploited, this vulnerability can allow attackers to gain unauthorized access to user accounts by cracking the weakly hashed passwords. This can lead to account compromise, data theft, and potential further exploitation of the affected system or service.

Mitigation Strategies

To mitigate this vulnerability, immediately stop using the insecure MD5 hashing algorithm for passwords. Replace MD5 with a stronger, modern hashing algorithm such as bcrypt, Argon2, or PBKDF2 to securely hash passwords and prevent attackers from easily cracking them.

Hi! I’m here to help you understand CVE-2025-65831. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70