<div><span>The vulnerability stems from the use of Math.random() in generating the multipart <br></span><div>boundary string that separates different form parts. <br> </div><div>Because Math.random() in JavaScript is not cryptographically secure and is deterministic <br> </div><div>based on its internal PRNG state, boundary values are predictable when enough outputs <br> </div><div>from the same PRNG are observed. This predictability enables attackers to reconstruct or <br> </div><span>guess boundary values used in legitimate requests</span><br> </div><div><br> </div><div>Refer&nbsp;<a href="https://techcedenceinfosystems-my.sharepoint.com/:b:/g/personal/venkatesha_techcedence_com/ERGy5ESShNdNsb8qbWfhdtEBfyjnYjNvPOJo007v4KXNDQ?e=4rz0dW">MAL00276-MSS-Threat Intelligence Advisory-HIGH-28-07-2025-JavaScript-Lib</a> </div>