Property
Languageclojure
Severityhigh
CWECWE-328: Use of Weak Hash
OWASPA03:2017 - Sensitive Data Exposure
Confidence LevelHigh
Impact LevelHigh
Likelihood LevelMedium

Description#

The code is using the MD5 hashing algorithm, which is outdated and insecure. MD5 can be easily broken, making it unsuitable for protecting sensitive data like passwords.

Impact#

If this vulnerability is exploited, attackers can quickly crack hashed data such as passwords or tokens, leading to unauthorized access, data breaches, and potential compromise of user accounts or sensitive information.