CyberRota Analysis
AI-GeneratedDancer2 versions up to 2.1.0 for Perl are vulnerable due to the generation of insecure session IDs when required cryptographically secure random number generator (CSPRNG) modules are unavailable, defaulting to a low-entropy fallback method. This vulnerability can lead to predictable session IDs, potentially allowing attackers to hijack user sessions and gain unauthorized access to systems. Organizations using Dancer2 should prioritize patching this vulnerability to mitigate the risk of session hijacking.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable. Dancer2::Core::Role::SessionFactory::generate_id silently falls back to a built-in rand-derived session id unless both Math::Random::ISAAC::XS and Crypt::URandom are available. The fallback session id is generated from a SHA-1 hash of a call to the built-in rand function, the absolute path of the Dancer2::Core::Role::SessionFactory module, an internal counter, the process id, the module instance memory address, and a shuffled string of characters (using the List::Util::shuffle function, which also uses the built-in rand function). These are all low-entropy and easily guessed sources. The built-in rand() function is seeded with 32-bits and considered unsuitable for security applications. Predictable session ids could allow an attacker to gain access to systems.