PT-2014-9144 · Mojolicious · Mojolicious

Published 2014-11-26 · Updated 2014-11-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Mojolicious versions prior to 5.48

Description The issue is related to an assumption in CGI parameter handling that can result in parameter injection attacks.

Recommendations For versions prior to 5.48, update to version 5.48 or later to resolve the issue.

Related Identifiers

MGASA-2014-0488

Affected Products

Mojolicious

References · 5

• https://osv.dev/vulnerability/MGASA-2014-0488 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0488.html · Security Note
• https://lists.fedoraproject.org/pipermail/package-announce/2014-October/141315.html · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=14345 · Note
• https://groups.google.com/forum/#!topic/mojolicious/aJTYjRCPjOE · Note