PT-2025-31159

CVE-2025-54769

Published

2025-07-28

Updated

2026-10-06

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache PERL (affected versions not specified)

Description An authenticated, read-only user can upload a file and perform a directory traversal to place the uploaded file in a location of their choosing. This can be used to overwrite existing PERL modules within the application, potentially leading to remote code execution (RCE) by an attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Jim Becher

Vendors

Affected products

Weakness enumeration

CWE-24: Path Traversal: \'../filedir\'

CWE-434: Unrestricted Upload of File with Dangerous Type

CWE-648: Incorrect Use of Privileged APIs