Business::GoCardless before 1.01 has three Perl webhook flaws
Empty webhook secrets accept forgeries, and unsigned legacy payloads can exhaust memory before verification.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
Empty webhook secrets accept forgeries, and unsigned legacy payloads can exhaust memory before verification.
Today 2.1K readers · 11K views · 8.3K reads · all time 157K views