Описание
Net::Xero 0.044 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.
Specifically Net::Xero uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.
Ссылки
EPSS
Процентиль: 26%
0.00091
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-331
Связанные уязвимости
CVSS3: 6.5
github
10 месяцев назад
Net::Xero 0.044 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Xero uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.
EPSS
Процентиль: 26%
0.00091
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-331