retspen / webvirtcloud

WebVirtCloud is virtualization web interface for admins and users
1.7k stars 372 forks source link

fix insecure randomness #514

Closed sianciou closed 2 years ago

sianciou commented 2 years ago

Avoid using random() function to generate password or uuid, random() is a insecure randomness function where its use can lead to serious vulnerabilities such as easy-to-guess temporary passwords

catborise commented 2 years ago

Thanks for that