CVE-2025-40915
Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens
概要
Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens.
That version of the module generates tokens as an MD5 of the process id, the current time, and a single call to the built-in rand() function.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web cpan.org
- web metacpan.org
- web metacpan.org