2019-09-23 22:09:32
snyk
PUBLISHED
Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes them predictable due to RandomStringUtils PRNGs algorithm not being cryptographically strong.