Cookie Leak Vulnerability in Mojolicious Module for Perl
CVE-2018-25100

5.3MEDIUM

Key Information:

Vendor

Mojolicious

Vendor
CVE Published:
24 March 2024

What is CVE-2018-25100?

The Mojolicious module for Perl prior to version 7.66 contains a vulnerability that can lead to cookie leakage when handling multiple cookies with similar attributes for the same domain. This issue specifically impacts the Mojo::UserAgent::CookieJar component, which is critical in managing cookies for web applications. Developers using Mojolicious in their projects should assess their applications for this vulnerability to ensure cookies are handled securely and user data is protected.

References

https://github.com/mojolicious/mojo/pull/1192
https://github.com/mojolicious/mojo/issues/1185
https://github.com/mojolicious/mojo/commit/c16a56a9d6575d...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.