CVE-2013-10075

CRITICAL9.1EPSS 0.01%

Published: 5/8/2026Modified: 5/9/2026

Description

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted.

Affected packages (1)

Debian/libapache-session-perlfrom 0

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	CRITICAL9.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2013-10075