Lucene search
+L

3 matches found

Mageia
Mageia
added 2014/11/26 10:14 a.m.30 views

Updated perl-Plack package fixes security vulnerability

Plack::App::File would previously strip trailing slashes off provided paths. This in combination with the common pattern of serving files with Plack::Middleware::Static could allow an attacker to bypass a whitelist of generated files CVE-2014-5269...

5CVSS6.3AI score0.02455EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2014/09/04 5:55 p.m.22 views

CVE-2014-5269

Plack::App::File in Plack before 1.0031 removes trailing slash characters from paths, which allows remote attackers to bypass the whitelist of generated files and obtain sensitive information via a crafted path, related to Plack::Middleware::Static...

5CVSS5.9AI score0.02455EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2014/09/04 5:00 p.m.52 views

CVE-2014-5269

Plack::App::File in Plack before 1.0031 removes trailing slash characters from paths, which allows remote attackers to bypass the whitelist of generated files and obtain sensitive information via a crafted path, related to Plack::Middleware::Static...

5CVSS6AI score0.02455EPSS
SaveExploits0
Rows per page
Query Builder