Fedora 43 and 44 Address Critical CSRF Vulnerability in Perl-Mojolicious

Fedora 43 and 44 Address Critical CSRF Vulnerability in Perl-Mojolicious

First seen 28 Jul 2026, 10:02 UTC •Linuxsecurity •98% similarity •57.8

Article Content

Browse articles
ThreatCluster

Fedora has released updates for Perl-Mojolicious to address a critical CSRF vulnerability identified as CVE-2026-15747. The flaw, which was published on July 14, 2026, allowed for potential information disclosure via BREACH compression attacks. The vulnerability affects users of Mojolicious 9.48, where CSRF tokens were improperly reused across sessions. The update masks tokens with a fresh random value on each request, significantly enhancing security. Users are encouraged to apply the updates using the 'dnf' package manager. The updates were confirmed by Emmanuel Seyman on July 14, 2026. No active exploitation has been reported as of the latest advisories.

Key Points: • CVE-2026-15747 addresses a critical CSRF vulnerability in Perl-Mojolicious. • Tokens were previously reused, making them vulnerable to BREACH attacks. • Users are advised to upgrade to Mojolicious 9.48 to mitigate risks.

ThreatCluster AI How this analysis works

Timeline

2026-07-14
CVE-2026-15747 published
A critical CSRF vulnerability in Perl-Mojolicious was disclosed, allowing potential information disclosure.
Linuxsecurity
2026-07-14
Update to Mojolicious 9.48 released
Fedora released an update to Mojolicious 9.48 to fix the CSRF vulnerability by masking tokens with random values.
Linuxsecurity
2026-07-28
Advisory published for Fedora 44
Fedora 44 also released an advisory regarding the same critical CSRF vulnerability, urging users to update.
Linuxsecurity

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Fedora CGI Linux Mojolicious