Low severity3.5NVD Advisory· Published Aug 30, 2021· Updated Jun 17, 2026
CVE-2021-27913
CVE-2021-27913
Description
The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to enumerate session tokens for accounts that are not under his/her control This issue affects: Mautic Mautic versions prior to 3.3.4; versions prior to 4.0.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
mautic/corePackagist | < 3.3.4 | 3.3.4 |
mautic/corePackagist | >= 4.0.0-alpha1, < 4.0.0 | 4.0.0 |
Affected products
2Patches
Vulnerability mechanics
References
5- github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3nvdExploitPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-x7g2-wrrp-r6h3ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-27913ghsaADVISORY
- github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2021-27913.yamlghsaWEB
- github.com/mautic/mautic/commit/d1cad766a2de74e6c6b89d6d78c2a5f2e36ba91cghsaWEB
News mentions
0No linked articles in our index yet.