High severity7.0NVD Advisory· Published Jun 11, 2025· Updated Apr 15, 2026
CVE-2025-40915
CVE-2025-40915
Description
Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens.
That version of the module generates tokens as an MD5 of the process id, the current time, and a single call to the built-in rand() function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <= 1.03
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.