Download
| Alert*
|
oval:org.secpod.oval:def:400605
perl-HTTP-Body was updated to 1.19 and also received a security fix for a potential remote code injection when upload files. oval:org.secpod.oval:def:601153 Jonathan Dolle reported a design error in HTTP::Body, a Perl module for processing data from HTTP POST requests. The HTTP body multipart parser creates temporary files which preserve the suffix of the uploaded file. An attacker able to upload files to a service that uses HTTP::Body::Multipart could ... |
