Lucene search
Veracode Vulnerability DatabaseVERACODE:47576HistoryJun 17, 2024 - 8:50 a.m.
Insufficient Entropy
2024-06-1708:50:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
insufficient entropy
zend-captcha
vulnerability
weak random number
7 High
AI Score
Confidence
Low
zendframework/zend-captcha is vulnerable to Insufficient Entropy. The vulnerability is due to the use of PHP’s array_rand() function, which does not generate sufficient entropy, leading to predictable CAPTCHA words. The attacker can potentially brute force the CAPTCHA words by exploiting the weak random number generation.
7 High
AI Score
Confidence
Low