Advisories · Technology
TOKUHIROM HTTP::Session2.
Every CVE that names TOKUHIROM HTTP::Session2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend
- TOKUHIROM HTTP::Session2
- CWE-20
- CVSS 6.5 Medium
HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function
- TOKUHIROM HTTP::Session2
- Weak cryptography or TLS
- CWE-340