CVE-2013-4407

HTTP::Body::Multipart in the HTTP-Body module for Perl (1.07 through 1.22, before 1.23) uses the part of the uploaded file's name after the first "." character…

published November 23, 2013

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

HTTP::Body::Multipart in the HTTP-Body module for Perl (1.07 through 1.22, before 1.23) uses the part of the uploaded file's name after the first "." character as the suffix of a temporary file, which makes it easier for remote attackers to conduct attacks by leveraging subsequent behavior that may assume the suffix is well-formed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02877 · 86.7th percentile
Published
2013-11-23T00:00Z
EPSS history
Timeline
  • 23 NOV 00:00Z
    HTTP::Body::Multipart in the HTTP-Body module for Perl (1.07 through 1.22, before 1.23) uses the part of the uploaded file's name after the first "." character…
    cvelistv5