Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2013-10031

Summary
Assigner-CPANSec
Assigner Org ID-9b29abf9-4ab0-4765-b253-1875cd9b441e
Published At-09 Dec, 2025 | 00:12
Updated At-11 Dec, 2025 | 14:36
Rejected At-
Credits

Plack::Middleware::Session versions before 0.17 for Perl may be vulnerable to HMAC comparison timing attacks

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:CPANSec
Assigner Org ID:9b29abf9-4ab0-4765-b253-1875cd9b441e
Published At:09 Dec, 2025 | 00:12
Updated At:11 Dec, 2025 | 14:36
Rejected At:
▼CVE Numbering Authority (CNA)
Plack::Middleware::Session versions before 0.17 for Perl may be vulnerable to HMAC comparison timing attacks

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

Affected Products
Vendor
MIYAGAWA
Product
Plack::Middleware::Session
Collection URL
https://cpan.org/modules
Package Name
Plack-Middleware-Session
Repo
https://github.com/plack/Plack-Middleware-Session.git
Program Files
  • lib/Plack/Middleware/Session/Cookie.pm
Program Routines
  • get_session
Default Status
unaffected
Versions
Affected
  • From 0.01 before 0.17 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-1254CWE-1254 Incorrect Comparison Logic Granularity
Type: CWE
CWE ID: CWE-1254
Description: CWE-1254 Incorrect Comparison Logic Granularity
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-26CAPEC-26 Leveraging Race Conditions
CAPEC ID: CAPEC-26
Description: CAPEC-26 Leveraging Race Conditions
Solutions

Upgrade to version 0.17 or higher

Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/plack/Plack-Middleware-Session/commit/b7f0252269ba1bb812b5dc02303754fe94c808e4
patch
Hyperlink: https://github.com/plack/Plack-Middleware-Session/commit/b7f0252269ba1bb812b5dc02303754fe94c808e4
Resource:
patch
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:9b29abf9-4ab0-4765-b253-1875cd9b441e
Published At:09 Dec, 2025 | 01:16
Updated At:16 Dec, 2025 | 19:16

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Type: Secondary
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE Matches
plack
plack
>>plack-middleware-session>>Versions before 0.17(exclusive)
cpe:2.3:a:plack:plack-middleware-session:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-1254Secondary9b29abf9-4ab0-4765-b253-1875cd9b441e
CWE ID: CWE-1254
Type: Secondary
Source: 9b29abf9-4ab0-4765-b253-1875cd9b441e
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://github.com/plack/Plack-Middleware-Session/commit/b7f0252269ba1bb812b5dc02303754fe94c808e49b29abf9-4ab0-4765-b253-1875cd9b441e
Patch
Hyperlink: https://github.com/plack/Plack-Middleware-Session/commit/b7f0252269ba1bb812b5dc02303754fe94c808e4
Source: 9b29abf9-4ab0-4765-b253-1875cd9b441e
Resource:
Patch

Change History

0
Information is not available yet

Similar CVEs

0Records found
Details not found