Skip to content
OpenAdvisories

Package · Ubuntu

libdancer-perl

1 known vulnerabilities.

1 result · Feed

  • Medium 5.9

    Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely

    Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely. The session id is generated from summing the character codepoints of the absolute pathname with the process id, the epoch time and calls to the built-in rand() functi…