CWE-332
Insufficient Entropy in PRNG
The lack of entropy available for, or used by, a Pseudo-Random Number Generator (PRNG) can be a stability and security threat.
Impactr finds and proves whether CWE-332 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.