Package · Debian

libcatalyst-plugin-session-perl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 6.5

CVE-2025-40924

Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely

Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a (usually SHA-1) hash of a simple counter, the epoch time, the built-in rand function, the PID and the current Catalyst context. This in…

HAARG Catalyst::Plugin::Session libcatalyst-plugin-session-perl libcatalyst-plugin-session-perl Debian Ubuntu

Jul 17, 2025
Low 3.5

CVE-2018-25052

Catalyst-Plugin-Session Session ID Session.pm _load_sessionid cross site scripting

A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function _load_sessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the…

libcatalyst-plugin-session-perl libcatalyst-plugin-session-perl Debian Ubuntu

Dec 28, 2022