CVE-2023-4695
Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.6
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
- EPSS probability
- 0.09%
- CWE
- CWE-1241
- Published
- 2023-09-01
- Last modified
- 2026-03-13
Affected products
- pkp pkp/pkp-lib
Weakness type
Related vulnerabilities
- CVE-2026-73576 — In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability...
- CVE-2026-57869 — Broken object-level access controls and the use of a deterministic pattern during random ID...
- CVE-2026-6420 — Keylime: keylime: security bypass due to hardcoded tpm quote nonce
- CVE-2025-13079 — Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens
- CVE-2025-32056 — Anti-Theft Bypass for Infotainment ECU
- CVE-2021-3692 — Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2
- CVE-2021-3689 — Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2