Skip to content
OpenAdvisories

Package · Maven

org.pac4j:pac4j-saml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.9
    CVE-2019-10755

    Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml

    The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects t…

    org.pac4j:pac4j-saml Maven