Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-10755 1 Pac4j 1 Pac4j 2024-11-21 4.9 Medium
The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml.