| Package | Affected versions | Patched versions |
|---|---|---|
| libpoe-component-irc-perl | < 6.32 | 6.32 |
libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing an argument such as "some text\rQUIT" to the 'privmsg' handler, which would cause the client to disconnect from the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free