CVE-2021-3990mediumCWE-338

CVE-2021-3990: falha de média gravidade em star7th/showdoc

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar star7th/showdoc+ Monitorar showdoc/showdoc

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.9%
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Produtos afetados
star7th · star7th/showdoc
CVEs relacionadas — star7th/showdoc

No mesmo produto, das mais perigosas para as menos.

CVE-2022-0967MEDIUMStored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdocEPSS 3.3%CVE-2022-1034CRITICALThere is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdocEPSS 1.5%CVE-2022-0362MEDIUMSQL Injection in star7th/showdocEPSS 1.5%CVE-2021-3678HIGHUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdocEPSS 1.1%CVE-2022-0079MEDIUMGeneration of Error Message Containing Sensitive Information in star7th/showdocEPSS 1.0%CVE-2022-0409HIGHUnrestricted Upload of File with Dangerous Type in star7th/showdocEPSS 0.9%