The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-IO-Compress-BaseUpgrade perl-Module-Load-ConditionalUpgrade perl-Parse-CPAN-MetaUpgrade perl-develUpgrade perl-libsUpgrade perl-IO-ZlibUpgrade perl-suidperlUpgrade perl-CPANUpgrade perl-Test-SimpleUpgrade perlUpgrade perl-Compress-ZlibUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Pod-SimpleUpgrade perl-Module-LoadUpgrade perl-ExtUtils-ParseXSUpgrade perl-Module-LoadedUpgrade perl-File-FetchUpgrade perl-versionUpgrade perl-IPC-CmdUpgrade perl-Module-BuildUpgrade perl-Test-HarnessUpgrade perl-Pod-EscapesUpgrade perl-Params-CheckUpgrade perl-Module-PluggableUpgrade perl-Log-Message-SimpleUpgrade perl-Time-HiResUpgrade perl-Digest-SHAUpgrade perl-ExtUtils-EmbedUpgrade perl-Object-AccessorUpgrade perl-CGIUpgrade perl-coreUpgrade perl-Time-PieceUpgrade perl-IO-Compress-Bzip2Upgrade perl-Module-CoreListUpgrade perl-Term-UIUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Compress-Raw-ZlibUpgrade perl-Archive-TarUpgrade perl-Log-MessageUpgrade perl-Package-ConstantsUpgrade perl-CPANPLUSUpgrade perl-ExtUtils-CBuilderUpgrade perl-Archive-ExtractUpgrade perl-IO-Compress-ZlibUpgrade perl-parent | Dec 1, 2016 | Jan 4, 2013 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Jan 4, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 15, 2015 |
| Gentoo Linux | — | Upgrade perl-core/Locale-Maketext.Upgrade dev-lang/perl. | Oct 30, 2017 | Jan 4, 2013 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory4 | Nov 30, 2017 | Jan 4, 2013 |
| Oracle Solaris | — | Upgrade runtime/perl-584 to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade runtime/perl-512 to version 5.12.5-0.175.1.7.0.2.0 on Solaris 11.1Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1 | May 29, 2017 | Jan 4, 2013 |
| Oracle_linux | — | Upgrade perl-Object-AccessorUpgrade perl-Test-HarnessUpgrade perl-ExtUtils-EmbedUpgrade perl-Digest-SHAUpgrade perl-Module-LoadUpgrade perl-Module-PluggableUpgrade perl-IO-Compress-Bzip2Upgrade perl-Module-BuildUpgrade perl-Compress-Raw-ZlibUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-MakeMakerUpgrade perl-parentUpgrade perl-IO-ZlibUpgrade perl-develUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Time-PieceUpgrade perl-coreUpgrade perl-ExtUtils-ParseXSUpgrade perl-Log-MessageUpgrade perl-Params-CheckUpgrade perl-suidperlUpgrade perl-Test-SimpleUpgrade perl-libsUpgrade perl-Time-HiResUpgrade perl-CGIUpgrade perlUpgrade perl-Term-UIUpgrade perl-Archive-ExtractUpgrade perl-Module-CoreListUpgrade perl-CPANUpgrade perl-Archive-TarUpgrade perl-IO-Compress-ZlibUpgrade perl-IPC-CmdUpgrade perl-IO-Compress-BaseUpgrade perl-Module-LoadedUpgrade perl-Log-Message-SimpleUpgrade perl-versionUpgrade perl-Compress-ZlibUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Pod-SimpleUpgrade perl-CPANPLUSUpgrade perl-Parse-CPAN-MetaUpgrade perl-File-FetchUpgrade perl-Module-Load-ConditionalUpgrade perl-ExtUtils-CBuilderUpgrade perl-Pod-Escapes | Oct 16, 2024 | Jan 4, 2013 |
| Suse | — | Upgrade perl-x86Upgrade perlUpgrade perl-Test-SimpleUpgrade perl-base-32bitUpgrade perl-docUpgrade perl-baseUpgrade perl-Module-BuildUpgrade perl-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade perl-modules | Nov 8, 2024 | Jan 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub