CVE-2019-25089

ÉLEVÉE 7.5CVE-2019-25089 · Published 27/12/2022 · updated 17/06/2026

En bref

CVE-2019-25089 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant muon (muon project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.70%, plus élevée que 53.5% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
muon muon_project	`= 0.1.1`	No fix yet

Description

A vulnerability has been found in Morgawr Muon 0.1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file src/muon/handler.clj. The manipulation leads to insufficiently random values. The attack can be launched remotely. Upgrading to version 0.2.0-indev is able to address this issue. The name of the patch is c09ed972c020f759110c707b06ca2644f0bacd7f. It is recommended to upgrade the affected component. The identifier VDB-216877 was assigned to this vulnerability.

References

Morgawr/Muon commit c09ed97 · Patch
Morgawr/Muon · Issue Tracking
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free