Description
GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling characters from an array using Perl-s built-in rand function, and generates a (by default) six-character string. The built-in rand function is unsuitable for security applications because it is predictable and reversible.
CVSS 5.3EPSS 0.216%Risque 0.54
Voir la source- Publication
- 2026-07-17 13:17:55
- Versions concernées
- <=1.75
- Type
- Bibliothèque
- Vecteur
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N