Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-36732
HistoryJun 12, 2023 - 2:15 a.m.

Integer overflow

2023-06-1202:15:00
PRIOn knowledge base
www.prio-n.com
1
integer overflow
crypto-js
vulnerability
node.js
nvd
random numbers
predictable

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%

The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string “0.” with an integer, which makes the output more predictable than necessary.

CPENameOperatorVersion
crypto-jslt3.2.1

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%

Related for PRION:CVE-2020-36732