CVE-2013-10031

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

Score

CVSS 3.1 7.5 High

Status

Analyzed - 9b29abf9-4ab0-4765-b253-1875cd9b441e

Published

2025-12-09

Last modified

2025-12-11

Weaknesses

CWE-1254

Affected products

• Plackmiddlewaresession (Miyagawa)
• Plack-middleware-session (Plack)

References

• https://github.com/plack/Plack-Middleware-Session/commit/b7f0252269ba1bb812b5dc02303754fe94c808e4