Information Disclosure

2022-12-0804:15:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

passeo

vulnerability

insecure password generation

0.001 Low

EPSS

Percentile

45.3%

JSON

passeo is vulnerable to information disclosure. The vulnerability exists due to the use of insecure random password generation library used in the generate function of __init__.py, allowing an attacker to guess the password.

CPENameOperatorVersion
passeole1.0.4
passeole1.0.4

CPE	Name	Operator	Version
	passeo	le	1.0.4
	passeo	le	1.0.4

References

github.com/ArjunSharda/Passeo/commit/8caa798b6bc4647dca59b2376204b6dc6176361a

github.com/ArjunSharda/Passeo/pull/4

github.com/ArjunSharda/Passeo/security/advisories/GHSA-mhhf-vgwh-fw9h

peps.python.org/pep-0506/

0.001 Low

EPSS

Percentile

45.3%

JSON

Related for VERACODE:38368