CVE-2011-2201

Published Sep 14, 2011 CVSS 2.0 · 4.3 Medium EPSS 6.9% KEV · Not listed
Description
The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-2191 The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 10:53 PM
Reserved
May 31, 2011, 12:00 AM
Status
Modified
Published
Sep 14, 2011, 4:05 PM
Modified
Jun 16, 2026, 11:30 PM