Lucene search
GoogleOSV:GHSA-8Q89-PWHH-7WFQHistoryOct 23, 2018 - 4:08 p.m.
Use of Insufficiently Random Values in penggle:kaptcha
2018-10-2316:08:56
Google
osv.dev
8
0.004 Low
EPSS
Percentile
73.3%
text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random (rather than SecureRandom) function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictions via a brute-force approach.
| CPE | Name | Operator | Version |
|---|---|---|---|
| com.github.penggle:kaptcha | eq | 2.3.2 |
Related
cvelist
cvelist
CVE-2018-18531
2022-10-03 16:22:03
nvd
nvd
CVE-2018-18531
2018-10-19 20:29:00
cve
cve
CVE-2018-18531
2022-10-03 16:22:03
prion
prion
Design/Logic Flaw
2018-10-19 20:29:00
github
github
Use of Insufficiently Random Values in penggle:kaptcha
2018-10-23 16:08:56