Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47017

HistoryMay 17, 2024 - 2:30 p.m.

Weak Entropy In Token Generation

2024-05-1714:30:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

1

vulnerability

token generation

weak entropy

fosuserbundle

base_convert

email confirmation

password resetting

7.2 High

AI Score

Confidence

Low

friendsofsymfony/user-bundle is vulnerable to Weak Entropy in Token Generation. The vulnerability is due to the imprecise nature of the base_convert function used in FOSUserBundle, which allows attackers to exploit the weakened randomness of tokens generated for email confirmation and password resetting.

7.2 High

AI Score

Confidence

Low