VULNERABILITY INTELLIGENCE

CVE-2016-15005

CVSS score8.8 HIGH

EPSS probability0.40%

CISA KEVNot currently listed

Published2022-12-27

Last modified2026-06-17

Description

CSRF tokens are generated using math/rand, which is not a cryptographically secure random number generator, allowing an attacker to predict values and bypass CSRF protections with relatively few requests.