The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-develUpgrade perl-libsUpgrade perl-IO-ZlibUpgrade perl-Module-LoadUpgrade perl-Module-BuildUpgrade perl-suidperlUpgrade perl-versionUpgrade perl-IPC-CmdUpgrade perl-IO-Compress-BaseUpgrade perl-CPANUpgrade perl-Module-Load-ConditionalUpgrade perl-Compress-Raw-Bzip2Upgrade perl-ExtUtils-ParseXSUpgrade perl-Pod-SimpleUpgrade perl-File-FetchUpgrade perlUpgrade perl-Test-SimpleUpgrade perl-Compress-ZlibUpgrade perl-Parse-CPAN-MetaUpgrade perl-Module-LoadedUpgrade perl-Test-HarnessUpgrade perl-Object-AccessorUpgrade perl-parentUpgrade perl-Time-HiResUpgrade perl-Log-MessageUpgrade perl-Module-PluggableUpgrade perl-CPANPLUSUpgrade perl-Archive-ExtractUpgrade perl-CGIUpgrade perl-Digest-SHAUpgrade perl-Time-PieceUpgrade perl-Term-UIUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-CBuilderUpgrade perl-Pod-EscapesUpgrade perl-Log-Message-SimpleUpgrade perl-ExtUtils-EmbedUpgrade perl-Archive-TarUpgrade perl-Compress-Raw-ZlibUpgrade perl-IO-Compress-Bzip2Upgrade perl-Params-CheckUpgrade perl-IO-Compress-ZlibUpgrade perl-coreUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Package-Constants | Dec 1, 2016 | Jan 4, 2013 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Jan 4, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 15, 2015 |
| Gentoo Linux | — | Upgrade dev-lang/perl.Upgrade perl-core/Locale-Maketext. | Oct 30, 2017 | Jan 4, 2013 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory4 | Nov 30, 2017 | Jan 4, 2013 |
| Oracle Solaris | — | Upgrade runtime/perl-584 to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade runtime/perl-512 to version 5.12.5-0.175.1.7.0.2.0 on Solaris 11.1 | May 29, 2017 | Jan 4, 2013 |
| Oracle_linux | — | Upgrade perl-CPANPLUSUpgrade perl-Module-Load-ConditionalUpgrade perl-Parse-CPAN-MetaUpgrade perl-versionUpgrade perl-Archive-ExtractUpgrade perl-IO-Compress-BaseUpgrade perl-CPANUpgrade perl-IPC-CmdUpgrade perl-Archive-TarUpgrade perl-Compress-ZlibUpgrade perl-Pod-EscapesUpgrade perl-File-FetchUpgrade perl-Module-CoreListUpgrade perl-Log-Message-SimpleUpgrade perl-Pod-SimpleUpgrade perl-Module-LoadedUpgrade perl-IO-Compress-ZlibUpgrade perl-ExtUtils-CBuilderUpgrade perl-Term-UIUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Test-HarnessUpgrade perl-parentUpgrade perl-Test-SimpleUpgrade perl-CGIUpgrade perl-Params-CheckUpgrade perl-Module-PluggableUpgrade perl-coreUpgrade perl-Time-PieceUpgrade perl-Module-LoadUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-EmbedUpgrade perl-ExtUtils-MakeMakerUpgrade perl-libsUpgrade perl-Time-HiResUpgrade perl-IO-ZlibUpgrade perl-Digest-SHAUpgrade perl-ExtUtils-ParseXSUpgrade perl-IO-Compress-Bzip2Upgrade perl-Locale-Maketext-SimpleUpgrade perl-Object-AccessorUpgrade perl-Log-MessageUpgrade perl-suidperlUpgrade perlUpgrade perl-Module-BuildUpgrade perl-Compress-Raw-ZlibUpgrade perl-devel | Oct 16, 2024 | Jan 4, 2013 |
| Suse | — | Upgrade perlUpgrade perl-base-32bitUpgrade perl-Test-SimpleUpgrade perl-x86Upgrade perl-docUpgrade perl-baseUpgrade perl-32bitUpgrade perl-Module-Build | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade perl-modules | Nov 8, 2024 | Jan 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub