A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction. NOTE: this is disputed by the Supplier because the product's objective is "to discourage automated scraping / bots, not guarantee resistance to determined attackers." The documentation states “the goal is not to provide a secure cryptographic algorithm but to use a proof-of-work mechanism that allows any capable device to decrypt the hidden data.”
References
Configurations
No configuration.
History
11 Dec 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-327 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
| Summary | (en) A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction. NOTE: this is disputed by the Supplier because the product's objective is "to discourage automated scraping / bots, not guarantee resistance to determined attackers." The documentation states “the goal is not to provide a secure cryptographic algorithm but to use a proof-of-work mechanism that allows any capable device to decrypt the hidden data.” |
08 Dec 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-08 19:15
Updated : 2025-12-11 15:15
NVD link : CVE-2025-65849
Mitre link : CVE-2025-65849
CVE.ORG link : CVE-2025-65849
JSON object : View
Products Affected
No product.
CWE
CWE-327
Use of a Broken or Risky Cryptographic Algorithm