CVE Catalog
CVE-2026-47373
HighSummary
Crypt::SaltedHash versions through 0.09 for Perl are susceptible to timing attacks. The use of Perl's built-in eq comparison may lead to hash disclosure through timing discrepancies.
Risk Assessment
An attacker could exploit timing differences to guess the hash, potentially compromising authentication data.
Recommendation
It is recommended to upgrade to a newer version of Crypt::SaltedHash that mitigates the timing attack vulnerability.
Original NVD description (English source)
Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash.