Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/08/30 8:38 p.m.36 views

Cryptographically weak PRNG in `utils.generateUUID`

In Brief utils.generateUUID, a helper function available in essentially all versions of NodeBB as far back as v1.0.1 and potentially earlier used a cryptographically insecure Pseudo-random number generator Math.random, which meant that a specially crafted script combined with multiple invocations...

9.8CVSS9.3AI score0.01073EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder