search

cxnleach / Vuln_GO_App

MIT License
0 stars 0 forks source link

CX Use_of_Cryptographically_Weak_PRNG @ vulnerable/sql.go [master] #85

Open github-actions[bot] opened 4 months ago

github-actions[bot] commented 4 months ago

Use_of_Cryptographically_Weak_PRNG issue exists @ vulnerable/sql.go in branch master

Method PrepareSQLDB at line 52 of vulnerable\sql.go uses a weak method Intn to produce random values. These values are then used as cryptographic variables by PrepareSQLDB at line 52 in vulnerable\sql.go.Similarity ID: 714613816

Severity: Medium

CWE:338

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 52

Code (Line #52):

rand.Intn(500))
github-actions[bot] commented 4 months ago

Issue still exists.