CVE-2026-120646: CVE-2026-120646: güvenlik açığı

Açıklama (NVD)

CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo. uploadInfo dereferences its argument and calls its filename method without checking that it is an upload filehandle. A plain string naming a defined global variable, such as the parameter value from ?upload=0, is treated as a symbolic reference, and the method call on it dies.

Özet bilgiler

EPSS

%0,18 (yüzdelik 8)

CWE

CWE-843

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• metacpan.org
• metacpan.org
• CWE-843