The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-Archive-TarUpgrade perl-Log-Message-SimpleUpgrade perl-ExtUtils-EmbedUpgrade perl-Digest-SHAUpgrade perl-Term-UIUpgrade perl-IO-Compress-Bzip2Upgrade perl-IO-Compress-ZlibUpgrade perl-Package-ConstantsUpgrade perl-Time-HiResUpgrade perl-Log-MessageUpgrade perl-Object-AccessorUpgrade perl-Params-CheckUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Archive-ExtractUpgrade perl-Module-PluggableUpgrade perl-CPANPLUSUpgrade perl-CGIUpgrade perl-parentUpgrade perl-Pod-EscapesUpgrade perl-Module-CoreListUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Compress-Raw-ZlibUpgrade perl-coreUpgrade perl-ExtUtils-CBuilderUpgrade perl-Time-PieceUpgrade perl-Pod-SimpleUpgrade perl-IO-Compress-BaseUpgrade perl-Module-Load-ConditionalUpgrade perl-develUpgrade perl-IO-ZlibUpgrade perl-versionUpgrade perl-ExtUtils-ParseXSUpgrade perlUpgrade perl-Parse-CPAN-MetaUpgrade perl-Test-HarnessUpgrade perl-Compress-ZlibUpgrade perl-Compress-Raw-Bzip2Upgrade perl-IPC-CmdUpgrade perl-libsUpgrade perl-Module-LoadUpgrade perl-Module-BuildUpgrade perl-suidperlUpgrade perl-Module-LoadedUpgrade perl-Test-SimpleUpgrade perl-File-FetchUpgrade perl-CPAN | Dec 1, 2016 | Jan 4, 2013 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Jan 4, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 15, 2015 |
| Gentoo Linux | — | Upgrade perl-core/Locale-Maketext.Upgrade dev-lang/perl. | Oct 30, 2017 | Jan 4, 2013 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory4 | Nov 30, 2017 | Jan 4, 2013 |
| Oracle Solaris | — | Upgrade runtime/perl-512 to version 5.12.5-0.175.1.7.0.2.0 on Solaris 11.1Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade runtime/perl-584 to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1 | May 29, 2017 | Jan 4, 2013 |
| Oracle_linux | — | Upgrade perl-Compress-Raw-Bzip2Upgrade perl-Term-UIUpgrade perl-Pod-SimpleUpgrade perl-IO-Compress-ZlibUpgrade perl-Module-Load-ConditionalUpgrade perl-Pod-EscapesUpgrade perl-Parse-CPAN-MetaUpgrade perl-CPANPLUSUpgrade perl-File-FetchUpgrade perl-Archive-ExtractUpgrade perl-IO-Compress-BaseUpgrade perl-CPANUpgrade perl-ExtUtils-CBuilderUpgrade perl-Archive-TarUpgrade perl-Module-CoreListUpgrade perl-Compress-ZlibUpgrade perl-IPC-CmdUpgrade perl-Module-LoadedUpgrade perl-versionUpgrade perl-Log-Message-SimpleUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Module-PluggableUpgrade perl-IO-Compress-Bzip2Upgrade perl-Log-MessageUpgrade perl-CGIUpgrade perl-Package-ConstantsUpgrade perl-Time-PieceUpgrade perl-Test-HarnessUpgrade perl-ExtUtils-EmbedUpgrade perl-coreUpgrade perl-ExtUtils-ParseXSUpgrade perl-libsUpgrade perl-Time-HiResUpgrade perlUpgrade perl-Params-CheckUpgrade perl-Digest-SHAUpgrade perl-suidperlUpgrade perl-Compress-Raw-ZlibUpgrade perl-Module-LoadUpgrade perl-Module-BuildUpgrade perl-develUpgrade perl-Locale-Maketext-SimpleUpgrade perl-parentUpgrade perl-IO-ZlibUpgrade perl-Test-SimpleUpgrade perl-Object-Accessor | Oct 16, 2024 | Jan 4, 2013 |
| Suse | — | Upgrade perl-base-32bitUpgrade perl-x86Upgrade perl-debugsourceUpgrade perl-64bitUpgrade perlUpgrade perl-base-debuginfo-32bitUpgrade perl-debuginfoUpgrade perl-debuginfo-x86Upgrade perl-base-debuginfoUpgrade perl-docUpgrade perl-base-debuginfo-x86Upgrade perl-32bitUpgrade perl-debuginfo-32bitUpgrade perl-base-x86Upgrade perl-base | Feb 17, 2015 | Jan 4, 2013 |
| Ubuntu | — | Upgrade perl-modules | Nov 8, 2024 | Jan 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub