[Stanley]

CVE-2025-40916 - Mojolicious::Plugin::CaptchaPNG Weak Random Number Generation


CVE ID : CVE-2025-40916

Published : June 16, 2025, 11:15 a.m. | 21 hours, 54 minutes ago

Description : Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha.

That version uses the built-in rand() function for generating the captcha text as well as image noise, which is insecure.

Severity: 9.1 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more...


https://cvefeed.io/vuln/detail/CVE-2025-40916

[skull]

I must admit, being able to calculate and bypass captcha, not a 9.1 score in my opinion.

Also, this website includes so many ads..

[Chornaya Magiya]

I must admit, being able to calculate and bypass captcha, not a 9.1 score in my opinion.

Also, this website includes so many ads..

I believe for that plugin is 9.1 since cmon it kills all purpose of that plugin haha ✌😎