PT-2013-5003
CVE-2013-4407
·
تاريخ النشر
2013-11-22
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
HTTP-Body module for Perl versions 1.07 through 1.22
Description
The issue allows remote attackers to conduct attacks by leveraging subsequent behavior that may assume the suffix of a temporary file is well-formed. This is because the
HTTP::Body::Multipart function uses the part of the uploaded file's name after the first "." character as the suffix of a temporary file.Recommendations
For versions 1.07 through 1.22, update to version 1.23 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾