Orta CVSS 5.3
CVE-2026-9692: CVE-2026-9692: güvenlik açığı
Açıklama (NVD)
Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with the built-in rand function, the epoch time, the heap address of an anonymous hash, and the PID. These are predictable or low-entropy sources that are unsuitable for security purposes.
Özet bilgiler
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - EPSS
- %0,42 (yüzdelik 36)
- CWE
- CWE-338
- Yama
- Yok / bilinmiyor