CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.
Impactr finds and proves whether CWE-338 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.