Lucene search
Veracode Vulnerability DatabaseVERACODE:31556HistoryAug 11, 2021 - 4:32 a.m.
Insecure Random Number Generation
2021-08-1104:32:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
39.0%
yiisoft/yii2 is using insecure random number generation. The vulnerability exists because it uses the function mt_rand() in CaptchaAction.php which is a predictable Random Number algorithm for random bytes and int generation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yiisoft/yii2 | le | 2.0.42 | |
| yiisoft/yii2 | le | 2.0.42 |
Related
osv
osv
CVE-2021-3692
2021-08-10 17:15:10
nvd
nvd
CVE-2021-3692
2021-08-10 17:15:10
cve
cve
CVE-2021-3692
2021-08-10 17:15:10
prion
prion
Code injection
2021-08-10 17:15:00
cvelist
cvelist
huntr
huntr
in yiisoft/yii2
2021-07-29 07:50:39
github
github