Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dragonfly has weak integrity checks for downloaded files
Vulnerability Description
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of hash functions, including the MD5 hash, for downloaded files. This allows attackers to replace files with malicious ones that have a colliding hash. This vulnerability is fixed in 2.1.0.
CVSS Information
N/A
Vulnerability Type
可逆的单向哈希
Vulnerability Title
Dragonfly 安全漏洞
Vulnerability Description
Dragonfly是DragonflyDB开源的一个框架，可以对任何内容类型进行动态处理。 Dragonfly 2.1.0之前版本存在安全漏洞，该漏洞源于使用MD5等不安全哈希函数，可能导致恶意文件替换。
CVSS Information
N/A
Vulnerability Type
N/A