Threats tagged 'brew-get_iplayer-cve-2026-15747'

Mojolicious versions from 4.59 up to but not including 9.48 for Perl expose a stable session CSRF token representation that can be exploited via a BREACH compression oracle attack. The vulnerability arises because the _csrf_token method generates and caches a single token per session, returning the same token on every call, which is placed in a hidden csrf_token input field. When responses containing this token also include attacker-controlled input and are gzip-compressed, an attacker can use compression length differences to recover the CSRF token and bypass csrf_protect validation. This vulnerability is critical and has a CVSS score of 9.1. A patch is available in version 3.36_3.