CVE-2024-57868 – Web::API Cryptographically Insecure Randomness Vulnerability

CVE ID : CVE-2024-57868

Published : April 5, 2025, 4:15 p.m. | 14 hours, 8 minutes ago

Description : Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.

Specifically Web::API uses the Data::Random library which specifically states that it is “Useful mostly for test programs”. Data::Random uses the rand() function.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…CVE ID : CVE-2024-57868

Published : April 5, 2025, 4:15 p.m. | 14 hours, 8 minutes ago

Description : Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.

Specifically Web::API uses the Data::Random library which specifically states that it is “Useful mostly for test programs”. Data::Random uses the rand() function.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…