exploitDog

CVE-2021-3990

Опубликовано: 01 дек. 2021

Источник: nvd

CVSS3: 6.5

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Ссылки

https://github.com/star7th/showdoc/commit/a9886f26c08225e0adca75c67dfca3f7c42b87d0
Patch
Third Party Advisory
https://huntr.dev/bounties/0680067d-56a7-4412-b06e-a267e850ae9f
Exploit
Patch
Third Party Advisory
https://github.com/star7th/showdoc/commit/a9886f26c08225e0adca75c67dfca3f7c42b87d0
Patch
Third Party Advisory
https://huntr.dev/bounties/0680067d-56a7-4412-b06e-a267e850ae9f
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:showdoc:showdoc:*:*:*:*:*:*:*:*

Версия до 2.9.13 (исключая)

EPSS

Процентиль: 53%

0.00301

Низкий

6.5 Medium

CVSS3

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-338

Связанные уязвимости

GHSA-vrgh-5w3c-ggf8

CVSS3: 6.5

github

около 4 лет назад

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

EPSS

Процентиль: 53%

0.00301

Низкий

6.5 Medium

CVSS3

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-338