CVE-2018-25100

CVSS 5.3 MEDIUMEPSS 0.6%CWE-400

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.3EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

24 mar 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The Mojolicious module before 7.66 for Perl may leak cookies in certain situations related to multiple similar cookies for the same domain. This affects Mojo::UserAgent::CookieJar.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Produtos afetados

n/a · n/a

Referências

https://github.com/mojolicious/mojo/commit/c16a56a9d6575ddc53d15e76d58f0ebcb0eeb149 https://github.com/mojolicious/mojo/issues/1185 https://github.com/mojolicious/mojo/pull/1192 https://metacpan.org/dist/Mojolicious/changes