GHSA-wwvv-x5mq-h3jj

Source

https://github.com/advisories/GHSA-wwvv-x5mq-h3jj

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/09/GHSA-wwvv-x5mq-h3jj/GHSA-wwvv-x5mq-h3jj.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-wwvv-x5mq-h3jj

Aliases

CVE-2021-3692

Published

2021-09-01T18:35:26Z

Modified

2023-11-08T04:06:17.044665Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev

Details

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

Database specific

{
    "nvd_published_at": "2021-08-10T17:15:00Z",
    "github_reviewed_at": "2021-08-30T20:28:42Z",
    "severity": "MODERATE",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-330",
        "CWE-338"
    ]
}

References

Affected packages

Packagist / yiisoft/yii2-dev

Package

Name: yiisoft/yii2-dev
Purl: pkg:composer/yiisoft/yii2-dev

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.43

Affected versions

2.*

2.0.0-alpha

2.0.0-beta

2.0.0-rc

2.0.0

2.0.1

2.0.2

2.0.3

2.0.4

2.0.5

2.0.6

2.0.7

2.0.8

2.0.9

2.0.10

2.0.11

2.0.11.1

2.0.11.2

2.0.12

2.0.12.1

2.0.12.2

2.0.13

2.0.13.1

2.0.13.2

2.0.13.3

2.0.14

2.0.14.1

2.0.14.2

2.0.15

2.0.15.1

2.0.16

2.0.16.1

2.0.17

2.0.18

2.0.19

2.0.20

2.0.21

2.0.22

2.0.23

2.0.24

2.0.25

2.0.26

2.0.27

2.0.28

2.0.29

2.0.30

2.0.31

2.0.32

2.0.33

2.0.34

2.0.35

2.0.36

2.0.37

2.0.38

2.0.39

2.0.39.1

2.0.39.2

2.0.39.3

2.0.40

2.0.41

2.0.41.1

2.0.42

2.0.42.1