VulnerabilityModified

CVE-2015-1592

Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly…

HIGH 7.5EPSS 75.0%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 75.0%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 75.03% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-74
Affected: debian/debian linux · sixapart/movable type
Source: cve@mitre.org

References

http://www.openwall.com/lists/oss-security/2015/02/12/17Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/02/12/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/72606Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1031777Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100912Third Party Advisory, VDB Entry
https://movabletype.org/news/2015/02/movable_type_607_and_5212_released_to_close_security_vulnera.htmlVendor Advisory
https://www.debian.org/security/2015/dsa-3183Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/02/12/17Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/02/12/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/72606Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1031777Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/100912Third Party Advisory, VDB Entry
https://movabletype.org/news/2015/02/movable_type_607_and_5212_released_to_close_security_vulnera.htmlVendor Advisory
https://www.debian.org/security/2015/dsa-3183Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.