Lucene search
+L
Plack::middleware::xsrfblock ProjectPlack::middleware::xsrfblock

1 matches found

CVE
CVE
added 2024/02/13 12:0 a.m.96 views

CVE-2023-52431

CVE-2023-52431 affects Plack::Middleware::XSRFBlock (Perl). The module prior to version 0.0.19 allows bypassing CSRF protection via an empty form value and an empty cookie when signed cookies are disabled. The vulnerability has a high impact in CVSS terms (C/H/I/A=High, exploitable remotely with ...

8.8CVSS6.8AI score0.00244EPSS
Save