VulnerabilityModified

CVE-2010-2253

(dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to a URL with a crafted filename or (2) a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence…

MEDIUM 6.8EPSS 3.29%

Does this matter?

Lower severity and a low EPSS score (3.29%). Track it; it rarely justifies an emergency change on its own.

Description

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to a URL with a crafted filename or (2) a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 3.29% probability · 88th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: gisle aas/libwww-perl · search.cpan/libwww-perl
Source: cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.