CVE-2013-4407

Name of the Vulnerable Software and Affected Versions HTTP-Body module for Perl versions 1.07 through 1.22

Description The issue allows remote attackers to conduct attacks by leveraging subsequent behavior that may assume the suffix of a temporary file is well-formed. This is because the HTTP::Body::Multipart function uses the part of the uploaded file's name after the first "." character as the suffix of a temporary file.

Recommendations For versions 1.07 through 1.22, update to version 1.23 or later to resolve the issue.