PT-2020-12278
CVE-2020-10674
·
تاريخ النشر
2020-03-18
·
تاريخ التحديث
2020-03-20
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PerlSpeak versions through 2.01
Description
The issue allows attackers to execute arbitrary OS commands. This can be demonstrated through the use of
system and 2-argument open.Recommendations
For PerlSpeak versions through 2.01, consider restricting the use of the
system function and the 2-argument open function until a patch is available. As a temporary workaround, review and limit the execution of OS commands within the application to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾