1 matches found
Cryptographically weak PRNG in `utils.generateUUID`
In Brief utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and potentially earlier used a cryptographically insecure Pseudo-random number generator Math.random, which meant that a specially crafted script combined with multiple invocations...
9.8CVSS9.3AI score0.01073EPSS
SaveExploits0References5Affected Software1
20