The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-264,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| mark_stosberg | data::formvalidator | 3.51 |
| mark_stosberg | data::formvalidator | 1.4 |
| mark_stosberg | data::formvalidator | 3.12 |
| mark_stosberg | data::formvalidator | 3.52 |
| mark_stosberg | data::formvalidator | 3.53 |
| mark_stosberg | data::formvalidator | 3.13 |
| mark_stosberg | data::formvalidator | 4.52 |
| mark_stosberg | data::formvalidator | 1.93 |
| mark_stosberg | data::formvalidator | 4.51 |
| mark_stosberg | data::formvalidator | 3.58 |
| mark_stosberg | data::formvalidator | 4.14 |
| mark_stosberg | data::formvalidator | 4.65 |
| mark_stosberg | data::formvalidator | 4.00 |
| mark_stosberg | data::formvalidator | 4.11 |
| mark_stosberg | data::formvalidator | 4.61 |
| mark_stosberg | data::formvalidator | 2.10 |
| mark_stosberg | data::formvalidator | 3.61 |
| mark_stosberg | data::formvalidator | 4.02 |
| mark_stosberg | data::formvalidator | 4.56 |
| mark_stosberg | data::formvalidator | 2.01 |
| mark_stosberg | data::formvalidator | 1.5.1 |
| mark_stosberg | data::formvalidator | 2.11_03 |
| mark_stosberg | data::formvalidator | 1.7 |
| mark_stosberg | data::formvalidator | 3.56 |
| mark_stosberg | data::formvalidator | 1.10 |
| mark_stosberg | data::formvalidator | 3.49_1 |
| mark_stosberg | data::formvalidator | 4.63 |
| mark_stosberg | data::formvalidator | 4.53 |
| mark_stosberg | data::formvalidator | 3.14 |
| mark_stosberg | data::formvalidator | 3.54 |
| mark_stosberg | data::formvalidator | 4.62 |
| mark_stosberg | data::formvalidator | 3.01 |
| mark_stosberg | data::formvalidator | 3.15 |
| mark_stosberg | data::formvalidator | 4.10 |
| mark_stosberg | data::formvalidator | 4.50 |
| mark_stosberg | data::formvalidator | 1.3 |
| mark_stosberg | data::formvalidator | 2.11_02 |
| mark_stosberg | data::formvalidator | 1.8 |
| mark_stosberg | data::formvalidator | 4.20 |
| mark_stosberg | data::formvalidator | 3.10 |
| mark_stosberg | data::formvalidator | 4.12 |
| mark_stosberg | data::formvalidator | 3.55 |
| mark_stosberg | data::formvalidator | 1.11 |
| mark_stosberg | data::formvalidator | 2.11_01 |
| mark_stosberg | data::formvalidator | 4.40 |
| mark_stosberg | data::formvalidator | 2.03 |
| mark_stosberg | data::formvalidator | 3.11 |
| mark_stosberg | data::formvalidator | 2.11_04 |
| mark_stosberg | data::formvalidator | 4.30 |
| mark_stosberg | data::formvalidator | 2.02 |
| mark_stosberg | data::formvalidator | 1.91 |
| mark_stosberg | data::formvalidator | * |
| mark_stosberg | data::formvalidator | 2.04 |
| mark_stosberg | data::formvalidator | 3.50 |
| mark_stosberg | data::formvalidator | 4.54 |
| mark_stosberg | data::formvalidator | 3.00 |
| mark_stosberg | data::formvalidator | 3.59 |
| mark_stosberg | data::formvalidator | 4.13 |
| mark_stosberg | data::formvalidator | 4.60 |
| mark_stosberg | data::formvalidator | 1.9 |
| mark_stosberg | data::formvalidator | 3.63 |
| mark_stosberg | data::formvalidator | 2.00 |
| mark_stosberg | data::formvalidator | 1.5 |
| mark_stosberg | data::formvalidator | 3.60 |
| mark_stosberg | data::formvalidator | 4.01 |
| mark_stosberg | data::formvalidator | 1.6 |
| mark_stosberg | data::formvalidator | 1.92 |
| mark_stosberg | data::formvalidator | 3.62 |
| mark_stosberg | data::formvalidator | 4.57 |
| mark_stosberg | data::formvalidator | 4.55 |
| mark_stosberg | data::formvalidator | 3.57 |
| mark_stosberg | data::formvalidator | 4.49_01 |