| Package | Affected versions | Patched versions |
|---|---|---|
| mod perl | ≥ 2.0.0, ≤ 2.0.11< 1.30 | 1.30 |
| satellite | = 5.1 |
PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not properly escape PATH_INFO before use in a regular expression, which allows remote attackers to cause a denial of service (resource consumption) via a crafted URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free