Description (CNA)
Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| BIAFRA / Dancer2::Plugin::Auth::OAuth | affected 0 before 0.22 |
CWE
CWE-338
References
- https://metacpan.org/release/BIAFRA/Dancer2-Plugin-Auth-OAuth-0.22/changes
- https://www.cve.org/CVERecord?id=CVE-2025-22376
- https://datatracker.ietf.org/doc/html/rfc5849#section-3.3
- https://datatracker.ietf.org/doc/html/rfc5849#section-4.9
ADP enrichment
No English description supplied.
No references supplied.