CVE-2025-15618Disclosure(mock / business\)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret key by using a MD5 hash of a single call to the built-in rand function, which is unsuitable for cryptographic use. This key is intended for encrypting credit card transaction data.

mock CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://security.metacpan.org/patches/B/Business-OnlinePayment-StoredTransaction/0.01/CVE-2025-15618-r1.patch

Vendor / third-party advisories

http://www.openwall.com/lists/oss-security/2026/03/31/7

Other references

https://metacpan.org/dist/Business-OnlinePayment-StoredTransaction/source/lib/Business/OnlinePayment/StoredTransaction.pm#L64-75

Weakness type (CWE)

CWE-338CWE-693

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

business\

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 2d ago at 2 mentions (2026-03-31); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

mock

Products

business\

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 3d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-31	2	Disclosure2
2026-04-01	1	Disclosure1
2026-04-02	1	Disclosure1

Full discourse4 posts

Open Source Security mailing list@oss_security192d
Disclosure
Perl CPAN CVE-2025-15618: Business::OnlinePayment::StoredTransaction versions through 0.01 uses an insecure secret key https://www.openwall.com/lists/oss-security/2026/03/31/7 CVE-2024-14031: Sereal::Encoder versions from 4.000 through 4.009_002 buffer overwrite in the Zstandard library https://www.openwall.com/lists/oss-security/2026/03/31/8
Post summary
Two Perl CPAN modules are disclosed with details on their vulnerabilities, but no patches, exploits, or PoC links are provided.
10031489
4.6K followersView on X
CVE@CVEnew193d
Disclosure
CVE-2025-15618 Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret … https://www.cve.org/CVERecord?id=CVE-2025-15618
Post summary
This is a disclosure that CVE-2025-15618 affects Business::OnlinePayment::StoredTransaction for Perl versions up to 0.01 by using an insecure secret key.
00010156
56.9K followersView on X
CosmicBytez@CosmicBytez193d
Disclosure
Security Advisory: CVE-2025-15618: Perl Payment Module Uses Insecure MD5/rand() Secret Key https://labs.cosmicbytez.ca/security/cve-2025-15618 #Cybersecurity #InfoSec #CVE #PatchNow
Post summary
The advisory announces that a Perl payment module relies on an insecure MD5/rand() secret key, providing vulnerability details but no PoC, exploit, patch, or evidence of active exploitation.
00000151
1 followersView on X
The Hacker Wire@TheHackerWire193d
Disclosure
🔴 CVE-2025-15618 - Critical Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret key by using a MD5 ha... https://www.thehackerwire.com/vulnerability/CVE-2025-15618/ https://t.co/8HUmLmNCHB
Post summary
CVE‑2025‑15618 reveals that Business::OnlinePayment::StoredTransaction uses an insecure MD5‑based secret key. No patch, exploit, or evidence of active exploitation is reported.
00000249
163 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	mock	business\	\	-	-

Explore more

Back to dashboard mock CVEs business\ vulnerabilities

What researchers are saying

CVE-2025-15618

Open Source Security mailing list@oss_securityDisclosure

Two Perl CPAN modules are disclosed with details on their vulnerabilities, but no patches, exploits, or PoC links are provided.

CVE@CVEnewDisclosure

This is a disclosure that CVE-2025-15618 affects Business::OnlinePayment::StoredTransaction for Perl versions up to 0.01 by using an insecure secret key.

CosmicBytez@CosmicBytezDisclosure

The advisory announces that a Perl payment module relies on an insecure MD5/rand() secret key, providing vulnerability details but no PoC, exploit, patch, or evidence of active exploitation.

The Hacker Wire@TheHackerWireDisclosure

CVE‑2025‑15618 reveals that Business::OnlinePayment::StoredTransaction uses an insecure MD5‑based secret key. No patch, exploit, or evidence of active exploitation is reported.