Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Perl Data::FormValidator模块'results()'安全限制绕过漏洞
Vulnerability Description
Perl是美国程序员拉里-沃尔（Larry Wall）所研发的一种免费且功能强大的跨平台编程语言。 Perl Data::FormValidator模块在"results()"的实现上存在安全限制绕过漏洞。使用untaint_all_constraints时，D::F::Results报告无效字段为有效。远程攻击者可利用此漏洞绕过安全限制，获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A