Code Security Finding: Weak Pseudo-Random (CWE-338, Medium Severity) in user-dao.js:53

[dimagwhitesourceapp]

Code Security Finding

This finding was first detected on 2023-12-04 11:31pm GMT and is still present in the last scan performed on 2024-02-07 01:37am GMT:

Severity	Vulnerability Type	CWE	File	Data Flows
Medium	Weak Pseudo-Random	CWE-338	user-dao.js:53	1
Vulnerable Code JS-Demo/app/data/user-dao.js Line 53 in 8d9a490 const year = Math.ceil(Math.random() * 30) + today.getFullYear(); Secure Code Warrior Training Material ● Training    ▪ Secure Code Warrior Weak Pseudo-Random Training ● Videos    ▪ Secure Code Warrior Weak Pseudo-Random Video ● Further Reading    ▪ OWASP Insecure Randomness 🏴 Suppress Finding ... as False Alarm ... as Acceptable Risk