CERT24BREW-get_iplayer-CVE-2024-58135 — Mojolicious versions 7.28 through 9.45 for Perl generate weak HMAC session cookie secrets via “mojo generate app” by defaultLoading data…
CERT24Threat Observatory
Period

BREW-get_iplayer-CVE-2024-58135 — Mojolicious versions 7.28 through 9.45 for Perl generate weak HMAC session cookie secrets via “mojo generate app” by default

Mojolicious versions 7.28 through 9.45 for Perl generate a weak HMAC session cookie secret by default through the “mojo generate app” tool. This may allow an attacker to brute-force the application’s session keys.

← Back to intelligence

BREW-get_iplayer-CVE-2024-58135 — Mojolicious versions 7.28 through 9.45 for Perl generate weak HMAC session cookie secrets via “mojo generate app” by default

Mojolicious versions 7.28 through 9.45 for Perl generate a weak HMAC session cookie secret by default through the “mojo generate app” tool. This may allow an attacker to brute-force the application’s session keys.