CVE-2024-57835

MEDIUM 5.5CVE-2024-57835 · Published 05/04/2025 · updated 17/06/2026

In short

CVE-2024-57835 is a MEDIUM (CVSS 5.5) vulnerability affecting line integration for amon2 (nipotan).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.9% of all vulnerabilities.
Fix: update to 0.04 or later.

Package	Affected versions	Patched versions
line integration for amon2 nipotan	`< 0.04`	`0.04`

Description

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand() function, which is not cryptographically secure

References

metacpan.org/release/SHLOMIF/String-Random-0.32/source/lib/String/Random.pm · Product
metacpan.org/release/TANIGUCHI/Amon2-Auth-Site-LINE-0.04/source/lib/Amon2/Auth/Site/LINE.pm · Product
metacpan.org/release/TANIGUCHI/Amon2-Auth-Site-LINE-0.04/source/lib/Amon2/Auth/Site/LINE.pm · Product
security.metacpan.org/docs/guides/random-data-for-security.html · Technical Description

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free