2 matches found
Updated perl-CGI-Session package fixes a security vulnerability
The updated package fixes a security vulnerability: CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. CVE-2026-56016...
5.9CVSS5.2AI score0.00361EPSS
SaveExploits0References4
CVE-2026-56016
A flaw was found in perl-CGI-Session. This vulnerability allows a remote attacker to predict session identifiers due to the use of low-entropy sources in the generateid method. By predicting a session identifier, an attacker can impersonate a user's session, leading to a bypass of authentication...
7.4CVSS5.7AI score0.00361EPSS
SaveExploits0References5
20