GMS-2020-4

ADVISORY - gitlab

Summary

An attacker is able to guess generated digits due to insufficient entropy.

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Insufficient Entropy

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

CREATED

5 years ago

UPDATED

5 years ago

ADVISORY ID

GMS-2020-4

EXPLOITABILITY SCORE

10.0

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

7.5high