6 matches found
EUVD-2026-120525
Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...
CVE-2026-125362
Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...
CVE-2026-125362: haiwen seahub: Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch…
Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...
CVE-2026-125362 Seahub through 14.0.10 Predictable Share Link Passwords via Batch Endpoint
Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...
CVE-2026-125362
Seahub versions through 14.0.10 are vulnerable to a weak randomness issue in the MultiShareLinksBatch.post() function. The root cause is the use of Python's non-cryptographic random.choices() to generate batch share link passwords. An authenticated user with permissions to create share links can ...
PT-2026-141185
Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...