CVE-2024-58036
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 5, 2025
Updated: Apr 10, 2025
CWE ID 338
Summary
CVE-2024-58036 is a vulnerability affecting Net::Dropbox::API version 1.9 and earlier for Perl. This issue stems from the use of the insecure rand() function as the default entropy source for cryptographic functions. The Data::Random library employed by Net::Dropbox::API, which is known to be mostly suitable for test programs, is the culprit. This weakness could potentially lead to predictable cryptographic keys and compromised data security.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.