Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Elithrar

#29803of 53,624
8.8Total CVSS
Vulnerabilities · 1
PT-2021-8422
8.8
2021-04-14
Github.Com/Dinever/Golf · Github.Com/Dinever/Golf · CVE-2016-15005
**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** The issue is related to the generation of CSRF tokens using a non-cryptographically secure random number generator, specifically `math/rand`. This allows an attacker to predict the values of these tokens with relatively few requests, effectively bypassing CSRF protections. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.