Vulnerability in Apache Software Foundation Cocoon
CVE-2025-24783
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. When a continuation is created, it gets a random identifier…
EPSS: 0.010 (77.6th percentile) — read the EPSS interpretation.
Affected products
- Apache Software Foundation Cocoon — versions 0
Weakness classification (CWE)
References
- lists.apache.org/thread/pk86jp5cvn41432op8wv1k8p14mp27nz (vendor-advisory)