CVE-2016-15005 — Cryptographically weak random number generation in github.com/dinever/golf
CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections wi…
Published: 2022-12-27 · CVSS: 8.8 · CVSS 3.1
CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7