Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SimpleGeo python-oauth2 加密问题漏洞
Vulnerability Description
oauth2-server是个人开发者的一个符合标准的用 PHP 编写的 OAuth 2.0 授权服务器的实现。为应用程序提供身份验证和授权功能，保护API安全。 SimpleGeo python-oauth2存在加密问题漏洞，该漏洞源于程序生成nonce值使用弱的随机数。远程攻击者利用该漏洞可以暴力猜出nonce值。
CVSS Information
N/A
Vulnerability Type
N/A