First published: Sun Apr 07 2024(Updated: )
The Mojolicious module before 8.65 for Perl is vulnerable to secure_compare timing attacks that allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mojolicious | >8.65 | |
Perl 5.30.0 | >1.74 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-36829 is considered a medium severity vulnerability due to its potential for timing attacks.
To fix CVE-2020-36829, upgrade the Mojolicious module to version 8.65 or later.
CVE-2020-36829 affects applications using Mojolicious versions prior to 8.65.
CVE-2020-36829 is related to secure_compare timing attacks that can expose secret string lengths.
CVE-2020-36829 affects Perl versions prior to 1.74.