CVE-2011-1589
- State
- Published
- Severity
- Not scored
- Published
- Apr 29, 2011
- Updated
- Aug 6, 2024
- Reserved
- Apr 5, 2011
Description
Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f (encoded slash dot dot slash) in a URI.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://perlninja.posterous.com/sharks-in-the-water
- DSA-2221vendor-advisory
- http://search.cpan.org/CPAN/authors/id/K/KR/KRAIH/Mojolicious-1.16.tar.gz
- ADV-2011-1072vdb-entry
- https://github.com/kraih/mojo/issues/114
- [oss-security] 20110418 Re: CVE request: Mojolicious directory traversal vulnerabilitymailing-list
- FEDORA-2011-5505vendor-advisory
- 44359third-party-advisory
- https://github.com/kraih/mojo/commit/b09854988c5b5b6a2ba53cc8661c4b2677da3818
- 44051third-party-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622952
- ADV-2011-1093vdb-entry
- 71850vdb-entry
- [oss-security] 20110416 CVE request: Mojolicious directory traversal vulnerabilitymailing-list
- 47402vdb-entry
- http://cpansearch.perl.org/src/KRAIH/Mojolicious-1.16/Changes
- mojolicious-url-directory-traversal(66830)vdb-entry
- [oss-security] 20110418 CVE request: Mojoliciousmailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=697229
- FEDORA-2011-5504vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.