CVE-2023-36993

EUVD-2023-40913
The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts.
PRNG
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
Affected Products (NVD)
VendorProductVersion
travianz_projecttravianz
8.3.3
travianz_projecttravianz
8.3.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://bramdoessecurity.com/travianz-hacked/
https://bramdoessecurity.com/travianz-hacked/