PT-2025-29824

🗓️ 16 Jul 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Vulnerable Plack-Middleware-Session versions before 0.35 use weak session ID generator open to attacks

Reporter	Title	Published	Views	Family All 23
ATTACKERKB	CVE-2025-40926	5 Mar 202601:24	–	attackerkb
Circl	CVE-2025-40923	16 Jul 202514:11	–	circl
CNNVD	Plack::Middleware::Session 安全漏洞	16 Jul 202500:00	–	cnnvd
CNNVD	Plack::Middleware::Session::Simple 安全漏洞	5 Mar 202600:00	–	cnnvd
CVE	CVE-2025-40923	16 Jul 202513:05	–	cve
Cvelist	CVE-2025-40923 Plack-Middleware-Session before version 0.35 for Perl generates session ids insecurely	16 Jul 202513:05	–	cvelist
Debian CVE	CVE-2025-40923	16 Jul 202513:05	–	debiancve
EUVD	EUVD-2025-208296	5 Mar 202603:31	–	euvd
EUVD	EUVD-2025-21693	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 42 Update: perl-Plack-Middleware-Session-0.36-1.fc42	16 Sep 202501:15	–	fedora

Source	Link
t	www.t.me/cveNotify/155201
osv	www.osv.dev/vulnerability/CVE-2025-40923
security-tracker	www.security-tracker.debian.org/tracker/CVE-2025-40923
lists	www.lists.security.metacpan.org/cve-announce/msg/31223483
ubuntu	www.ubuntu.com/security/CVE-2025-40923
github	www.github.com/plack/Plack-Middleware-Session/pull/52
openwall	www.openwall.com/lists/oss-security/2025/07/16/4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-40923
t	www.t.me/cvenotify/129159
metacpan	www.metacpan.org/release/MIYAGAWA/Plack-Middleware-Session-0.34/source/lib/Plack/Session/State.pm

12 Mar 2026 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.3

EPSS0.00535

SSVC

vulnerable software affected versions session id generator cryptographic weaknesses update recommendations