CVE-2025-48931 LOW

CVE-2025-48931

Vendor Telemessage

Product service

Weakness CWE-328 · Weak hash

Published May 28, 2025

Last update May 29, 2025

View on NVD All CVEs

CVSS base score

3.2/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

The TeleMessage service through 2025-05-05 relies on MD5 for password hashing, which opens up various attack possibilities (including rainbow tables) with low computational effort.

Key dates

02Disclosure timeline

May 28, 2025 CVE published

May 29, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-48931 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/328.html

Related vulnerabilities

04Related CVE

CVE-2025-9078 Weak cache keys lead to post IDOR and link preview poisoning CVE-2024-47829 pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting CVE-2023-46233 crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard CVE-2026-10813 LMCache KV Cache utils.py hex_hash_to_int16 weak hash CVE-2025-11650 Tomofun Furbo 360/Furbo Mini Password shadow weak hash