CVE-2023-36993

9.8 criticalEPSS 1.0%

Critical (9.8) in travianz project travianz. EPSS 1.0% chance of exploitation in the next 30 days.

The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-338
Published: 2023-07-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

travianz_project:travianz

References

https://bramdoessecurity.com/travianz-hacked/
https://bramdoessecurity.com/travianz-hacked/

Check your stack JSON