CVE-2024-13939

The String::Compare::ConstantTime module for Perl (through version 0.321 ) is vulnerable to timing attacks . The underlying cause is that the equals function returns false immediately if the lengths of the compared strings differ, which allows an attacker to guess the length of a secret string (t...