CVE-2025-40916
Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text
概要
Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha.
That version uses the built-in rand() function for generating the captcha text as well as image noise, which is insecure.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web cpan.org
- web metacpan.org
- web metacpan.org
- web metacpan.org
- web security.metacpan.org