Catalyst-Plugin-Authentication Security Advisories - Cpan | Ecosyste.ms: Advisories

Catalyst-Plugin-Authentication

Infrastructure plugin for the Catalyst authentication framework.

View on github.com · View on metacpan.org

Security Advisories for Catalyst-Plugin-Authentication in cpan

about 1 month ago

Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not automatically change the session id after authentication. An attacker that obtains a session id co... CPANSA-Catalyst-Plugin-Authentication-2009-10007

cpan Catalyst-Plugin-Authentication

about 2 months ago

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password. CPANSA-Catalyst-Plugin-Authentication-2026-5091

cpan Catalyst-Plugin-Authentication

Filter by Severity