← Database

CVE-2024-41259

CRITICAL CVSS: 9.1 Published: 2024-08-01 Modified: 2026-06-17

Description

Use of insecure hashing algorithm in the Gravatar's service in Navidrome v0.52.3 allows attackers to manipulate a user's account information.

Affected Platforms

Navidrome Navidrome

Weakness Type

CWE-200

References