CVE-2018-18531

text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random rather than SecureRandom function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictio...

cloud.agileframework:agile-security (>=2.1.0.m8, <=2.2.0), cloud.agileframework:spring-boot-starter-kaptcha (>=2.1.0.m8, <=2.2.0) +258 more potentially affected by CVE-2018-18531 via com.github.penggle:kaptcha (2.3.2)

com.github.penggle:kaptcha MAVEN version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.penggle:kaptcha and may be impacted: - cloud.agileframework:agile-security =2.1.0.m8, =2.1.0.m8, =5.2.1, =3.5.0-jdk17-2.0.0, =1.0.0-2024,...

CVE-2018-18531

text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random rather than SecureRandom function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictio...