Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2201
HistorySep 14, 2011 - 12:00 a.m.

CVE-2011-2201

2011-09-1400:00:00
ubuntu.com
ubuntu.com
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.02

Percentile

89.0%

The Data::FormValidator module 4.66 and earlier for Perl, when
untaint_all_constraints is enabled, does not properly preserve the taint
attribute of data, which might allow remote attackers to bypass the taint
protection mechanism via form input.

Bugs

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

0.02

Percentile

89.0%