CVE-2025-27552
MEDIUMDBIx::Class::EncodedColumn <0.00032 - Info Disclosure
Title source: llmDescription
DBIx::Class::EncodedColumn use the rand() function, which is not cryptographically secure to salt password hashes. This vulnerability is associated with program files Crypt/Eksblowfish/Bcrypt.pm. This issue affects DBIx::Class::EncodedColumn until 0.00032.
Scores
CVSS v3
4.0
EPSS
0.0002
EPSS Percentile
5.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-331
CWE-338
CWE-916
Status
draft
Timeline
Published
Mar 26, 2025
Tracked Since
Feb 18, 2026