CVE-2025-22376
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Jan 3, 2025
Updated: Jan 21, 2025
CWE ID 338
Summary
CVE-2025-22376 is a vulnerability affecting the Net::OAuth package for Perl before version 0.29. The issue lies in the use of a default nonce, which is generated from the built-in rand() function. This function generates a 32-bit integer that is not cryptographically strong, making it susceptible to prediction and potential attacks. An attacker could exploit this weakness to perform unauthorized actions using OAuth tokens. Users are strongly encouraged to update to the latest version of Net::OAuth to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.