CVE-2022-30782

CVE-2022-30782 describes a cryptographic weakness in the Openmoney API, specifically affecting versions through 2020-06-29, where it utilizes the JavaScript Math.random function for generating random numbers. This vulnerability is rated as HIGH severity (CVSS 7.5), indicating a network-exploitable flaw with low attack complexity that could lead to high confidentiality impact due to the use of non-cryptographically secure random numbers. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.