Skip to content
OpenAdvisories

Vendor

GRYPHON

2 known vulnerabilities.

Products

Mojolicious::Plugin::CaptchaPNG 1 Mojolicious::Plugin::CSRF 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.0
    CVE-2025-40915

    Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens

    Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens. That version of the module generates tokens as an MD5 of the process id, the current time, and a single call to the built-in rand() function.

    GRYPHON Mojolicious::Plugin::CSRF