Directory Traversal Vulnerability in Mojolicious by Mojolicious Team
CVE-2011-1589

Currently unrated

Key Information:

Vendor: Mojolicious
Status: Mojolicious
Vendor: CVE Published:; 29 April 2011

🔔 Create Mojolicious Vulnerability Alert

What is CVE-2011-1589?

A directory traversal vulnerability exists in Mojolicious, prior to version 1.16, allowing remote attackers to access arbitrary files on the server. This vulnerability is exploited by manipulating URIs to include encoded traversal sequences such as %2f..%2f. When successfully exploited, attackers can read sensitive files from the server's filesystem, potentially leading to information disclosure.

References

http://perlninja.posterous.com/sharks-in-the-water

x_refsource_MISC

http://www.debian.org/security/2011/dsa-2221

vendor-advisoryx_refsource_DEBIAN

http://search.cpan.org/CPAN/authors/id/K/KR/KRAIH/Mojolic...

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 29, 2011
Vulnerability Reserved
Apr 5, 2011

CVE-2011-1589 Data

JSON