Skip to content
OpenAdvisories

Product · GARU

Dancer::Plugin::Auth::Google

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled

    Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled. The default user agent is initialised with SSL_verify_mode explicitly disabled. An attacker with network man-in-the-middle (MITM) capability between the Dancer applicat…