2 matches found
AZL-92394 CVE-2026-15747 affecting package perl-Mojolicious 8.57-3
Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle. csrftoken generates and caches one token per session and returns the same value on every call, and csrffield places that value in a hidden csrftoken input...
9.1CVSS5.9AI score0.00255EPSS
SaveExploits0References1
CVE-2026-15747
Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle. csrftoken generates and caches one token per session and returns the same value on every call, and csrffield places that value in a hidden csrftoken input...
9.1CVSS5.4AI score0.00255EPSS
SaveExploits0
20