Skip to content
OpenAdvisories

Vendor

LOCALSHOP

1 known vulnerabilities.

Products

WebService::Xero 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2024-52322

    WebService::Xero 0.11 for Perl uses insecure rand() function for cryptographic functions

    WebService::Xero 0.11 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically WebService::Xero uses the Data::Random library which specifically states tha…

    LOCALSHOP WebService::Xero