Security Advisories (1)
CVE-2024-58041 (2026-02-24)

Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolder::DB::Developer uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

NAME

Smolder::Control::Admin::Developers

DESCRIPTION

Controller module for Admin activities concerning Developers

RUN MODES

reset_pw

Allow an admin to reset the password of a developer to a new random string and then email the new password to the developer. Uses the Email/reset_pw.tmpl template for the email and the Admin/Developers/resetpw_success.tmpl for displaying the result.

edit

Show the edit form to allow an admin to edit the data about a developer. Uses the Admin/Developers/edit.tmpl template.

process_edit

Processes the incoming data from the edit mode and update the developers info in the database if validation passes. Uses the Admin/Developers/edit_success.tmpl template.

list

Show a list of all developers. Uses the Admin/Developers/list_table.tmpl template.

add

Show the add form for adding a new developer. Uses the Admin/Developers/add.tmpl template.

process_add

Process the incoming data from the add mode and add it to the database if validation passes. Uses the Admin/Developers/add_success.tmpl.

delete

Delete a Developer and all data associated with him. If successful returns the list mode.

details

Show the details of a developer. Uses the Admin/Developers/details.tmpl template.