Skip to content

CWE-330: Use of Insufficiently Random Values in MetricsHelper.java #3897

Description

@sizhe-eb

OS:

  • Windows
  • MacOS
  • Linux

Platform:

  • iOS
  • Android

SDK:

  • @sentry/react-native (>= 1.0.0)
  • react-native-sentry (<= 0.43.2)

SDK version: Android SDK 34

react-native version: 0.74.1

Are you using Expo?

  • Yes
  • No

Are you using sentry.io or on-premise?

  • sentry.io (SaaS)
  • on-premise

Configuration:

(@sentry/react-native)

const reactInstrumentation = new Sentry.ReactNavigationInstrumentation({
      routeChangeTimeoutMs: 500, // How long it will wait for the route change to complete Default is 1000ms
    });
    Sentry.init({
      dsn: ENV.SENTRY_INTERNAL_DNS,
      debug: false, //Enable debuger when needed
      enableNative: false, //The SDK will only capture errors on the upper layer.
      maxBreadcrumbs: 150,
      // enableNdkScopeSync: true,
      enableAutoSessionTracking: true,
      sessionTrackingIntervalMillis: 10000,
      environment: ENV,
      // Performance
      integrations: [
        new Sentry.ReactNativeTracing({
          idleTimeout: 5000,
          tracingOrigins: ["localhost", /^\//, /^https:\/\//],
          routingInstrumentation: reactInstrumentation,
        }),
      ],
      tracesSampleRate: 1.0,
    });

I have the following issue:
CWE-330: Use of Insufficiently Random Values
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators
image

Steps to reproduce:

image

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

Status
No status

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions