Chorny Apache::session vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Chorny Apache::session: 1 record(s), with affected versions and fixes.cpe:2.3:a:chorny:apache::session
CVE-2013-10075
Critical · 9.1
CWE-672 May 8, 2026
Apache::Session versions through 1.94 for Perl re-creates deleted sessions
Apache::Session versions through 1.94 for Perl re-creates deleted sessions.
The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted.