| Package | Affected versions | Patched versions |
|---|---|---|
| http-body | = 0.01= 0.03= 0.2= 0.4= 0.5= 0.6= 0.7= 0.8= 0.9= 1.00= 1.01= 1.02= 1.03= 1.04= 1.05= 1.06= 1.07= 1.08= 1.09= 1.10= 1.11= 1.12= 1.14= 1.15= 1.16≤ 1.17 |
HTTP::Body::Multipart in the HTTP-Body module for Perl (1.07 through 1.22, before 1.23) uses the part of the uploaded file's name after the first "." character as the suffix of a temporary file, which makes it easier for remote attackers to conduct attacks by leveraging subsequent behavior that may assume the suffix is well-formed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free