NetSight
IP …
high7.5

CVE-2020-36829

The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to guess the length of a secret string.

Impact

The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected.

Affected products

ProductAffected versions
Mojolicious Module
before 8.65

Versions were read from the advisory text. No structured product data has been published for this record yet.

References