CVE-2025-24783

Apache Cocoon (all versions) is vulnerable to an Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) . The root cause is that the PRNG used to generate continuation identifiers is seeded with the system startup time, making these identifiers insufficiently unpredictable. An attacker...