Skip to content
OpenAdvisories

Vendor

ELLIOTT

1 known vulnerabilities.

Products

Net::Xero 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-56370

    Net::Xero 0.044 and earlier for Perl uses insecure rand() function for cryptographic functions

    Net::Xero 0.044 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Xero uses the Data::Random library which specifically states that it is "Usef…

    ELLIOTT Net::Xero