Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 12:0 p.m.10 views

CVE-2025-24783

UNSUPPORTED WHEN ASSIGNED Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. When a continuation is created, it gets a random identifier. Because the random number generator used to generate these...

7.5CVSS6.8AI score0.0076EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2025/01/27 3:30 p.m.9 views

org.apache.cocoon:cocoon-apples-sample (=2.3.0), org.apache.cocoon:cocoon-dist-samples (=2.3.0) +8 more potentially affected by CVE-2025-24783 via org.apache.cocoon:cocoon-forms-impl (=2.3.0)

org.apache.cocoon:cocoon-forms-impl MAVEN version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cocoon:cocoon-forms-impl and may be impacted: - org.apache.cocoon:cocoon-apples-sample =2.3.0 - org.apache.cocoon:cocoon-dist-samples...

7.5CVSS5.8AI score0.0076EPSS
Exploits0
NVD
NVD
added 2025/01/27 3:15 p.m.15 views

CVE-2025-24783

UNSUPPORTED WHEN ASSIGNED Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. When a continuation is created, it gets a random identifier. Because the random number generator used to generate these...

7.5CVSS0.0076EPSS
Exploits0References2
CVE
CVE
added 2025/01/27 2:47 p.m.74 views

CVE-2025-24783

Apache Cocoon is affected by an Incorrect Usage of Seeds in the PRNG for continuation identifiers. The PRNG is seeded with startup time, making continuation IDs potentially predictable and enabling access to unauthorized continuations. The issue is stated to affect all versions of Apache Cocoon, ...

7.5CVSS7AI score0.0076EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/27 2:47 p.m.8 views

CVE-2025-24783 Apache Cocoon: continuations may not be private

UNSUPPORTED WHEN ASSIGNED Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. When a continuation is created, it gets a random identifier. Because the random number generator used to generate these...

7.6AI score0.0076EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/27 2:47 p.m.32 views

CVE-2025-24783 Apache Cocoon: continuations may not be private

UNSUPPORTED WHEN ASSIGNED Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. When a continuation is created, it gets a random identifier. Because the random number generator used to generate these...

0.0076EPSS
Exploits0References1
Rows per page
Query Builder