Dancer2
1 CVEs
product
Monthly
Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictable.
Information Disclosure
Dancer2
Suse
NVD
CVSS 3.1
9.1
EPSS
0.2%
EPSS 0%
CVSS 9.1
CRITICAL
PATCH
Act Now
Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictable.
Information Disclosure
Dancer2
Suse
NVD