CVE-2021-42216

CriticalCVSS 9.8

Published: 15/12/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.16%

63th percentile - higher than 63% of all known CVEs

Summary

A broken or risky cryptographic algorithm was found in AnonAddy 0.8.5 within VerificationController.php. This vulnerability could allow an attacker to manipulate the verification process.

Risk Assessment

The risk involves potential bypass of verification mechanisms, which could lead to unauthorized access to user accounts or identity spoofing.

Recommendation

Immediately update AnonAddy to the latest version and replace the risky cryptographic algorithm with a secure one, such as bcrypt or Argon2.

Original NVD description (English source)

A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.