CNNVD-202509-4545 Information

CNNVD ID

CNNVD-202509-4545

CVE-2024-58040

  • CNNVD Published: 2025-09-30

Description (Chinese)

MetaCPAN Crypt::RandomEncryption是MetaCPAN基金会的一个Perl库。 MetaCPAN Crypt::RandomEncryption 0.01版本存在安全漏洞,该漏洞源于使用不安全的rand函数进行加密,可能导致加密强度不足。

Description (English)

MetaCPAN Crypt: :RandomEncryption is a Perl bank of the MetaCPAN Foundation. MetaCPAN Crypt: :RandomEncryption 0.01 has a security loophole, which stems from the use of unsafe brand functions for encryption, which may lead to insufficient encryption.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

MetaCPAN

Published

2025-09-30

Last Modified

2026-02-24

References

https://metacpan.org/release/QWER/Crypt-RandomEncryption-0.01/source/lib/Crypt/RandomEncryption.pm#L33 https://perldoc.perl.org/functions/rand https://security.metacpan.org/docs/guides/random-data-for-security.html

Share on: