Apache::Session versions through 1.94 for Perl re-creates deleted sessions.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 8, 2026 · NIST NVD

   Detected

   Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted.

2. Jun 16, 2026 · NIST NVD

   Updated

   Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted.

Affected

• cpe chorny/apache\
• vendor CHORNY Apache::Sessionversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2013-10075

  Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be

  cve.org
• NIST NVDVulnerability recordCVE-2013-10075

  Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to

  nvd.nist.gov

References

• Mailing List · openwall.com
• Issue Tracking · rt.cpan.org