CVE-2018-25160

*** Pendiente de traducción *** HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend.<br /> <br /> For example, if an application uses memcached for session storage, then it may be possible for a remote attacker to inject memcached commands in the session id value.