Session ID Leakage in Catalyst::Plugin::Statsd for Perl
CVE-2026-45180
Currently unrated
What is CVE-2026-45180?
Catalyst::Plugin::Statsd, a Perl plugin, has a vulnerability that may expose session identifiers if the communication channel to the statsd daemon is not adequately secured. This exposure occurs particularly when UDP packets are sent to an unsecured host on a different network, allowing potential attackers to capture these session IDs. Such captured identifiers can be misused as authentication tokens, posing a significant security risk to affected systems.
Affected Version(s)
Catalyst::Plugin::Statsd 0 <= 0.10.0