apache cocoon vulnerabilities (CVE)

CVE records published for apache cocoon, newest first. Follow to get an email when a new one appears.

1 results
7.5High
CVE-2025-24783

Apache Cocoon: continuations may not be private

Apache Software Foundation Apache Cocoon

** UNSUPPORTED WHEN ASSIGNED ** Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. When a continuation is created, it gets a random identifier. Because the random…