CVE-2013-10031

Опубликовано: 09 дек. 2025

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

Ссылки

https://github.com/plack/Plack-Middleware-Session/commit/b7f0252269ba1bb812b5dc02303754fe94c808e4
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:plack:plack-middleware-session:*:*:*:*:*:*:*:*

Версия до 0.17 (исключая)

EPSS

Процентиль: 17%

0.00255

Низкий

7.5 High

CVSS3

Дефекты

CWE-1254

Связанные уязвимости

CVE-2013-10031

CVSS3: 7.5

ubuntu

8 месяцев назад

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

CVE-2013-10031

CVSS3: 7.5

redhat

8 месяцев назад

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

CVE-2013-10031

CVSS3: 7.5

debian

8 месяцев назад

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMA ...

GHSA-rvh4-4hm5-gx4x

CVSS3: 7.5

github

8 месяцев назад

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

EPSS

Процентиль: 17%

0.00255

Низкий

7.5 High

CVSS3

Дефекты

CWE-1254