CVE-2024-58036

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.

Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-331 CWE-338

Affected software

Vendor	Product	Versions
NORBU	Net::Dropbox::API	<= 1.9

References

Timeline

Published: Apr 5, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-58044.3The Conditional Fields for Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,CVE-2024-580409.1Crypt::RandomEncryption for Perl version 0.01 uses insecure rand() function during encryption.CVE-2024-580419.1Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses th CVE-2024-580425.5In the Linux kernel, the following vulnerability has been resolved: rhashtable: Fix potential deadlock by moving schedule_work outside lock CVE-2024-580435.5Permission bypass vulnerability in the window module Impact: Successful exploitation of this vulnerability may affect service confidentialit CVE-2024-580445.5Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect ava CVE-2024-580454.7Multi-concurrency vulnerability in the media digital copyright protection module Impact: Successful exploitation of this vulnerability may a CVE-2024-580465.5Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confi CVE-2024-580475.5Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service c CVE-2024-580484.7Multi-thread problem vulnerability in the package management module Impact: Successful exploitation of this vulnerability may affect availab CVE-2024-580495.5Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service c CVE-2024-58059.1Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gatew