Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38816
HistoryJan 10, 2023 - 7:40 a.m.

Insufficient Entropy In Randomly-Generated Alphanumeric Strings

2023-01-1007:40:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
entropy
random
alphanumeric
github
goutils
functions
short strings
patterns
clusters

0.002 Low

EPSS

Percentile

54.0%

github.com/masterminds/goutils has insufficient entropy In randomly-generated alphanumeric strings. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least one digit from 0 to 9 which significantly reduces the amount of entropy in short strings generated by these functions, resulting in patterns or clusters of values more likely to occur than others.