Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend
Vulnerability Description
HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend. For example, if an application uses memcached for session storage, then it may be possible for a remote attacker to inject memcached commands in the session id value.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
HTTP::Session2 安全漏洞
Vulnerability Description
HTTP::Session2是Tokuhiro Matsuno个人开发者的一个Perl包。 HTTP::Session2 1.09及之前版本存在安全漏洞，该漏洞源于未验证用户提供的会话ID格式，可能导致代码注入或其他影响。
CVSS Information
N/A
Vulnerability Type
N/A