CVE-2022-3959

A vulnerability, which was classified as problematic, has been found in drogon up to 1.8.1. Affected by this issue is some unknown functionality of the component Session Hash Handler. The manipulation leads to small space of random values. The attack may be launched remotely. Upgrading to version 1.8.2 is able to address this issue. The name of the patch is c0d48da99f66aaada17bcd28b07741cac8697647. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213464.
Configurations

Configuration 1 (hide)

cpe:2.3:a:drogon:drogon:*:*:*:*:*:*:*:*

History

11 Nov 2022, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-11-11 16:15

Updated : 2024-02-04 22:51


NVD link : CVE-2022-3959

Mitre link : CVE-2022-3959

CVE.ORG link : CVE-2022-3959


JSON object : View

Products Affected

drogon

  • drogon
CWE
CWE-330

Use of Insufficiently Random Values