Skip to content
OpenAdvisories

Package · Maven

com.github.penggle:kaptcha

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2018-18531

    Use of Insufficiently Random Values in penggle:kaptcha

    text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random (rather than SecureRandom) function for generating CAPTCHA values, which makes it easier for remote attack…

    com.github.penggle:kaptcha Maven