2 matches found
CVE-2020-14423
Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictable CONVOSLOCALSECRET value, affecting password resets and invitations...
5.4AI score0.01059EPSS
SaveExploits0References3
CVE-2020-14423: Use of Insufficiently Random Values
Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictable CONVOSLOCALSECRET value, affecting password resets and invitations...
5.3CVSS5.7AI score0.01059EPSS
SaveExploits0References2
20