Approved changes feed: RSS · Atom

cpe:2.3:a:rrwo:catalyst::plugin::statsd:*:*:*:*:*:*:*:*

part: a version: * update: plugin

VendorRrwo (b5300a69-c4f4-5cc7-a4bb-65304bf38389)
ProductCatalyst (32f697c0-b763-5e97-bcbc-7d3c2c549157)
Edition*
Languagestatsd
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-45180 vulnerable 2026-06-08 08:05:11.487134 Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids
Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids. If the communication channel to the statsd daemon is not secured (for example, by sending UDP packets to a host on another network), then users' session ids may be leaked. This may allow an attacker to use session ids as authentication tokens.
Published: 2026-05-10T20:03:18.315Z
Updated: 2026-05-12T14:26:17.506Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.