Skip to content
OpenAdvisories

Vendor

SRI

4 known vulnerabilities.

Products

Mojolicious 3 Mojo::JSON 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2024-58134

    Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default

    Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default. These predictable default secrets can be exploited by an attacker to forge session cookies.  An attacker who kn…

    SRI Mojolicious libmojolicious-perl libmojolicious-perl Debian Ubuntu Azure Linux