PT-2026-43488 · Unknown+1 · Io::Compress+2
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IO::Compress versions prior to 2.220
Description
An issue in File::GlobMapper allows the execution of arbitrary code through an attacker-controlled output glob. The function
parseOutputGlob() wraps the provided output glob string in double quotes and stores it in the parser state. Subsequently, the getFiles() function executes the stored expression using eval STRING. A literal double quote within the output glob can close the double quote wrapper, causing the subsequent characters to be evaluated as Perl code. This code executes with the privileges of the calling process.Recommendations
Update to version 2.220 or later.
Exploit
Fix
Code Injection
Eval Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
File::Globmapper
Io::Compress
Rocky Linux