| Package | Affected versions | Patched versions |
|---|---|---|
| perl | = 5.10.0= 5.10.1= 5.11.0= 5.11.1= 5.11.2= 5.11.3= 5.11.4= 5.11.5= 5.12.0= 5.12.1= 5.12.2= 5.12.3= 5.13.0= 5.13.1= 5.13.10= 5.13.11= 5.13.2= 5.13.3= 5.13.4= 5.13.5= 5.13.6= 5.13.7= 5.13.8= 5.13.9 |
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free