CVE-2025-15578 — Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely
Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely. The session id is seeded with the system time (which is available from HTTP response headers),…
Published: 2026-02-16 · CVSS: 9.8 · CVSS 3.1
Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely. The session id is seeded with the system time (which is available from HTTP response headers), a call to the built-in rand() function, and the PID.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7