plack::middleware::xsrfblock_project CVEs

Beta · best-effort

1 CVEs tagged to vendor plack::middleware::xsrfblock_project — 0 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2023-52431

Published Feb 13, 2024

The Plack::Middleware::XSRFBlock package before 0.0.19 for Perl allows attackers to bypass a CSRF protection mechanism via an empty form value and an empty cookie (if signed cooki…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1