PT-2022-18971

CVE-2022-28355

Published

2022-04-02

Updated

2022-04-11

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Scala.js versions prior to 1.10.0

Description The issue concerns the generation of predictable values by the randomUUID function in Scala.js. This predictability can potentially be exploited.

Recommendations For versions prior to 1.10.0, update to version 1.10.0 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the randomUUID function until a patch is applied.

Exploitability

Exploit

Fix

Impacts

Researchers

Armanbilge

Vendors

Affected products

Weakness enumeration

CWE-330: Use of Insufficiently Random Values

Related identifiers

CVE-2022-28355