CVE-2023-4695: Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
Published Sep 1, 2023
·Updated
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Affected Software
1 affected component
pkp Pkb-lib<3.3.0-16
Event History
Sep 1, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-4695.
2
What is the severity of CVE-2023-4695?
The severity of CVE-2023-4695 is critical (8.1).
3
What software is affected by CVE-2023-4695?
The software affected by CVE-2023-4695 is Pkp Pkb-lib prior to version 3.3.0-16.
4
How can I fix CVE-2023-4695?
To fix CVE-2023-4695, update your Pkp Pkb-lib software to version 3.3.0-16 or higher.
5
Where can I find more information about CVE-2023-4695?
You can find more information about CVE-2023-4695 at the following references: [link1](https://github.com/pkp/pkp-lib/commit/e5e7e543887fe77708aa31e07b18fe85f9b5a3b5) and [link2](https://huntr.dev/bounties/887c7fc7-70c8-482d-b570-350533af4702).