Security Advisories (1)
CVE-2024-58041 (2026-02-24)

Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolder::DB::Developer uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

NAME

Smolder::Control::Admin::Projects

DESCRIPTION

Controller module for all admin actions concerning projects.

RUN MODES

change_admin

Change the project admin status for a developer within a project.

devs

Shows a list of developers that can be assigned to this project and any developers currently assigned to this project for editing.

Uses the Admin/Projects/devs.tmpl template.

add_dev

Add a developer to a project. Returns the dev run mode when done.

remove_dev

Remove a developer from a project. Returns the dev run mode when done.

edit

Edit the information about a project. Uses the Admin/Projects/edit.tmpl template.

list

Show a list of the current projects. Uses the Admin/Projects/list.tmpl template.

add

Show the form to add a new project. Uses the Admin/Projects/add.tmpl template.

process_add

Process the incoming data from both the add and edit modes. Updates the database if validation passes and then uses either the Admin/Projects/add_success.tmpl or Admin/Projects/edit_success.tmpl templates.

details

Show the details about a project. Uses the Admin/Projects/details.tmpl template.

delete

Delete a project and all information associated with it. If successful returns to the list run mode.