Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc
CVE-2021-3678

7.5HIGH

Key Information:

Vendor

Star7th

Status
Star7th/showdoc
Vendor
CVE Published:
4 August 2021

What is CVE-2021-3678?

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Affected Version(s)

star7th/showdoc <= 2.9.7

References

https://huntr.dev/bounties/f9a9defd-29ea-4442-b692-ff1512...
x_refsource_CONFIRM
https://github.com/star7th/showdoc/commit/4b962c1740311e0...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

CVSS V3.0

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.