Debian/libwww-perl: unknown
lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to
Action: Upgrade libwww-perl to 5.835-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.835-1 | - |
Fixed versions
| 5.835-1 |
Sources
published · modified · JSON