← Database

CVE-2024-57868

MEDIUM CVSS: 5.5 Published: 2025-04-05 Modified: 2026-06-17

Description

Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Web::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

Affected Platforms

Lev Web\

Weakness Type

CWE-331, CWE-338, CWE-338

References