# CVE-2025-65831: The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker obtained a copy of these…

Source: https://junglewise.ai/threats/cve-2025-65831-the-application-uses-an-insecure-hashing-algorithm-md5-to-hash  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-10  
License: CC BY 4.0 with a link back

CVE-2025-65831 · Severity: high · CVSS 7.5 · Published 2025-12-10

The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker obtained a copy of these hashes, either through exploiting cloud services, performing TLS downgrade attacks on the traffic from a mobile device, or through another means, they may be able to crack the hash in a reasonable amount of time and gain unauthorized access to the victim's account.

Technologies: [Meatmeet](https://junglewise.ai/threats/technologies/meatmeet). Vendors: [Meatmeet](https://junglewise.ai/threats/vendors/meatmeet).

## Quick answers

**Is CVE-2025-65831 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-65831 being exploited in the wild.

**How severe is CVE-2025-65831?** High severity, with a CVSS score of 7.5, published 10 December 2025.

**Which products and versions are affected?** Meatmeet. The advisory does not name versions.

**Is there a fix for CVE-2025-65831?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-65831?** Check whether you run Meatmeet. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Meatmeet

## Related threats

- [The mobile application insecurely handles information stored within memory. By performing a memory dump on the…](https://junglewise.ai/threats/cve-2025-65832-the-mobile-application-insecurely-handles-information-stored)
- [Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a result, an…](https://junglewise.ai/threats/cve-2025-65830-due-to-a-lack-of-certificate-validation-all-traffic-from-the)
- [The mobile application is configured to allow clear text traffic to all domains and communicates with an API server…](https://junglewise.ai/threats/cve-2025-65827-the-mobile-application-is-configured-to-allow-clear-text-traffic)
- [The mobile application was found to contain stored credentials for the network it was developed on. If an attacker…](https://junglewise.ai/threats/cve-2025-65826-the-mobile-application-was-found-to-contain-stored-credentials)
- [An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0. An exported activity can be spawned with the…](https://junglewise.ai/threats/cve-2025-65820-an-issue-was-discovered-in-meatmeet-android-mobile-application-1)