Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hvx-xh5r-79rw

Опубликовано: 25 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.4

Описание

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

EPSS

Процентиль: 27%
0.00098
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-330

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

EPSS

Процентиль: 27%
0.00098
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-330