HMAC-MD5 Implementation Flaw in Mojolicious Framework by Mojolicious Inc.
CVE-2010-4803

Currently unrated

Key Information:

Vendor: Mojolicious
Status: Mojolicious
Vendor: CVE Published:; 3 May 2011

🔔 Create Mojolicious Vulnerability Alert

What is CVE-2010-4803?

The Mojolicious framework prior to version 0.999927 exhibits a weakness in its handling of HMAC-MD5 checksums. This inadequacy may allow remote attackers to exploit the flaw, leading to potential unauthorized data access or modification. Proper implementation of checksum mechanisms is crucial for ensuring the integrity and authenticity of data in web applications.

References

http://cpansearch.perl.org/src/KRAIH/Mojolicious-1.20/Cha...

x_refsource_CONFIRM

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622952

x_refsource_CONFIRM

http://www.debian.org/security/2011/dsa-2239

vendor-advisoryx_refsource_DEBIAN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 3, 2011
Vulnerability Reserved
May 2, 2011

CVE-2010-4803 Data

JSON