PT-2020-12278

CVE-2020-10674

·

Published

2020-03-18

·

Updated

2020-03-20

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PerlSpeak versions through 2.01
Description The issue allows attackers to execute arbitrary OS commands. This can be demonstrated through the use of system and 2-argument open.
Recommendations For PerlSpeak versions through 2.01, consider restricting the use of the system function and the 2-argument open function until a patch is available. As a temporary workaround, review and limit the execution of OS commands within the application to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')
Related identifiers
CVE-2020-10674
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com