| Package | Affected versions | Patched versions |
|---|---|---|
| webapp | ≤ 0.9.9.6 |
The getcgi function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 attempts to parse query strings that contain (1) non-printing characters, (2) certain printing characters that do not commonly occur in URLs, or (3) invalid URL encoding sequences, which has unknown impact and remote attack vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free