Plack

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Plack records in CISA KEV

No Plack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

\ 1 record MEDIUM

Records

1 record in \ · all components

TI-2023-28779 CVE-2023-52431 · GHSA-895f-2fwm-hcv8

The Plack::Middleware::XSRFBlock package before 0.0.19 for Perl allows attackers to…

MEDIUM 40

The Plack::Middleware::XSRFBlock package before 0.0.19 for Perl allows attackers to bypass a CSRF protection mechanism via an empty form value and an empty cookie (if signed cookies are disabled).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00244 Published 2024-02-13 No fix listed CWE-269

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0