Description (CNA)
CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| github.com/dinever/golf / github.com/dinever/golf | affected 0 before 0.3.0 |
CWE
No CWE identifiers supplied.
References
- https://github.com/dinever/golf/pull/24
- https://github.com/dinever/golf/commit/3776f338be48b5bc5e8cf9faff7851fc52a3f1fe
- https://github.com/dinever/golf/issues/20
- https://pkg.go.dev/vuln/GO-2020-0045
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.