Perl Dancer <1.3400 会话 ID 未验证漏洞

CVE-2015-10149: Dancer versions before 1.3400 for Perl pass unvalidated session ids from the session cookie to the session engine

推荐理由

Perl Dancer 开发者必读：旧版本存在会话 ID 未验证漏洞，极易导致会话劫持。请检查依赖版本，尽快升级至 1.3400+ 以修复此可利用的安全风险。

Posted by Robert Rothenberg on Nov 14

由 Robert Rothenberg 发布于 11 月 14 日

========================================================================

CVE-2015-10149 CPAN Security Group

CVE-2015-10149 CPAN 安全组

========================================================================

CVE ID: CVE-2015-10149

Distribution: Dancer

发行版：Dancer

Versions: before 1.3400

版本：早于 1.3400

MetaCPAN: https://metacpan.org/dist/Dancer

VCS Repo:...

VCS 仓库：...

看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力