Reversible One-Way Hash in io.github.javaezlib:JavaEZ

CAO 7.5CVE-2022-29249 · GHSA-67fj-6w6m-w5j8 · Công bố 24/05/2022 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2022-29249 là lỗ hổng mức CAO (CVSS 7.5) ảnh hưởng io.github.javaezlib:JavaEZ, javaez (javaez project).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.75%, cao hơn 55.1% các lỗ hổng khác.
Cách xử lý: cập nhật lên 1.7 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
io.github.javaezlib:JavaEZ Maven	`≥ 1.6, < 1.7`	`1.7`
javaez javaez_project	`= 1.6`	Chưa có bản vá

Mô tả

Impact

This weakness allows the force decryption of locked text by hackers. The issue is NOT critical for non-secure applications, however may be critical in a situation where the highest levels of security are required. This issue ONLY affects v1.6 and does not affect anything pre-1.6. Upgrading to 1.7 is advised.

Patches

The vulnerability has been patched in release 1.7.

Workarounds

Currently there is no way to fix the issue without upgrading.

References

CWE-327 CWE-328

For more information

If you have any questions or comments about this advisory:

Open an issue in our issue tracker
Email us at [email protected]

Mô tả của NVD

JavaEZ is a library that adds new functions to make Java easier. A weakness in JavaEZ 1.6 allows force decryption of locked text by unauthorized actors. The issue is NOT critical for non-secure applications, however may be critical in a situation where the highest levels of security are required. This issue ONLY affects v1.6 and does not affect anything pre-1.6. The vulnerability has been patched in release 1.7. Currently, there is no way to fix the issue without upgrading.