Skip to content
OpenAdvisories

Package · Debian

libdancer-perl

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.9

    Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely

    Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely. The session id is generated from summing the character codepoints of the absolute pathname with the process id, the epoch time and calls to the built-in rand() functi…