Approved changes feed: RSS · Atom
cpe:2.3:a:ether:catalyst::plugin::authentication:*:*:*:*:*:*:*:*
part: a version: update: plugin
| Vendor | Ether (a107867d-0ba1-5fc1-8bf9-4168b9feacc6) |
|---|---|
| Product | Catalyst (526bf300-d7bd-55df-9684-15649288135f) |
| Edition | |
| Language | authentication |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-10007 |
vulnerable | 2026-07-28 17:28:34.498718 |
Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks
Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks.
Catalyst::Plugin::Authentication does not automatically change the session id after authentication. An attacker that obtains a session id cookie can use this to impersonate the victim.
Published: 2026-06-09T07:34:51.909Z
Updated: 2026-06-09T15:21:06.809Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.