CVE-2024-57835

MOYENNE 5.5CVE-2024-57835 · Published 05/04/2025 · updated 17/06/2026

En bref

CVE-2024-57835 est une vulnérabilité MOYENNE (CVSS 5.5) touchant line integration for amon2 (nipotan).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.29%, plus élevée que 21.9% des vulnérabilités.
Correctif : mettre à jour vers 0.04 ou plus récent.

Package	Affected versions	Patched versions
line integration for amon2 nipotan	`< 0.04`	`0.04`

Description

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand() function, which is not cryptographically secure

References

metacpan.org/release/SHLOMIF/String-Random-0.32/source/lib/String/Random.pm · Product
metacpan.org/release/TANIGUCHI/Amon2-Auth-Site-LINE-0.04/source/lib/Amon2/Auth/Site/LINE.pm · Product
metacpan.org/release/TANIGUCHI/Amon2-Auth-Site-LINE-0.04/source/lib/Amon2/Auth/Site/LINE.pm · Product
security.metacpan.org/docs/guides/random-data-for-security.html · Technical Description

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free