Количество 2
Количество 2
CVE-2018-18531
text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random (rather than SecureRandom) function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force approach.
GHSA-8q89-pwhh-7wfq
Use of Insufficiently Random Values in penggle:kaptcha
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-18531 text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random (rather than SecureRandom) function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force approach. | CVSS3: 9.8 | 0% Низкий | больше 7 лет назад |
| GHSA-8q89-pwhh-7wfq Use of Insufficiently Random Values in penggle:kaptcha | CVSS3: 9.8 | 0% Низкий | больше 7 лет назад |
Уязвимостей на страницу