Lucene search
+L

1 matches found

nodejs
nodejs
added 2019/09/26 9:24 p.m.35 views

Cryptographically Weak PRNG

Overview Versions of generator-jhipster use a Cryptographically Weak PRNG that may lead to account takeover. The package uses a cryptographically insecure method to generate password reset links, which allows an attacker to guess password reset links and takeover accounts. Recommendation Update t...

7.5CVSS2.9AI score0.03673EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder