CVE-2024-52322

5.5MEDIUM

WebService::Xero 0.11 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically WebService::Xero

게시됨: 4/5/2025업데이트됨: 11/13/2025
NVD에서 보기MITRE에서 보기

설명

WebService::Xero 0.11 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically WebService::Xero uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

AI 분석AI 기반

영향받는 제품

localshopwebservice\
\

참조