CVE-2025-22376 - AskarLabs CVE Database

CVE-2025-22376

Vendor N/A

Product n/a

Weakness CWE-338

Published January 3, 2025

Last update January 21, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.

Key dates

02Disclosure timeline

January 3, 2025 CVE published

January 21, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-22376 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/338.html

Related vulnerabilities

04Related CVE

CVE-2024-58036 Net::Dropbox::API 1.9 and earlier for Perl uses insecure rand() function for cryptographic functions CVE-2023-48224 Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides CVE-2025-2814 Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions CVE-2024-24554 Bludit - Insecure Token Generation CVE-2025-41731 Jumo: Insufficient entropy in PRNG may lead to root access