6 matches found
Insufficient Entropy
zendframework/zend-captcha is vulnerable to Insufficient Entropy. The vulnerability is due to the use of PHP's arrayrand function, which does not generate sufficient entropy, leading to predictable CAPTCHA words. The attacker can potentially brute force the CAPTCHA words by exploiting the weak...
PT-2024-40370
Name of the Vulnerable Software and Affected Versions Zend Framework versions prior to the fixed version Description The issue concerns the generation of CAPTCHA challenges. Specifically, the Zend Captcha Word v1 and ZendCaptchaWord v2 components use PHP's internal array rand function to select a...
PT-2024-40179
Name of the Vulnerable Software and Affected Versions: Zend Framework versions prior to the fixed version Description: The issue concerns the generation of CAPTCHA challenges. Specifically, the Zend Captcha Word v1 and ZendCaptchaWord v2 components use PHP's internal array rand function to select...
PT-2024-40024
Name of the Vulnerable Software and Affected Versions Zend Framework versions prior to the fixed version Description The issue is related to the generation of CAPTCHA challenges. Specifically, the Zend Captcha Word v1 and ZendCaptchaWord v2 components use PHP's internal array rand function to...
