CVE-2022-30782

High

Openmoney API through 2020-06-29 uses the JavaScript Math.random function, which does not provide cryptographically secure random numbers.

mitre·CWE-330·Published 2022-05-16

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

138 chars

Openmoney API through 2020-06-29 uses the JavaScript Math.random function, which does not provide cryptographically secure random numbers.

NVDen

138 chars

Openmoney API through 2020-06-29 uses the JavaScript Math.random function, which does not provide cryptographically secure random numbers.

La API de Openmoney versiones hasta 29-06-2020, usa la función Math.random de JavaScript, que no proporciona números aleatorios criptográficamente seguros

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N