CVE-2020-14423: Use of Insufficiently Random Values

Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictable CONVOSLOCALSECRET value, affecting password resets and invitations...

PT-2020-13997

Name of the Vulnerable Software and Affected Versions Convos versions prior to 4.20 Description The issue arises from the improper generation of a random secret in Core/Settings.pm and Util.pm, leading to a predictable CONVOS LOCAL SECRET value. This predictability affects password resets and...