CVE-2023-52431: Plack::middleware::xsrfblock Project Plack::middleware::xsrfblock

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

The Plack::Middleware::XSRFBlock package before 0.0.19 for Perl allows attackers to bypass a CSRF protection mechanism via an empty form value and an empty cookie (if signed cookies are disabled).

Affected products

• Plack::middleware::xsrfblock Project Plack::middleware::xsrfblock: before 0.0.19 (fixed in 0.0.19)

Published 2024-02-13. Last modified 2026-06-17.