CVE-2023-36993

2023-07-0700:00:00

mitre

www.cve.org

cryptographic flaw

travianz

account takeover

password reset

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

59.3%

JSON

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts.

References

bramdoessecurity.com/travianz-hacked/