The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-ExtUtils-MakeMakerUpgrade perl-IO-Compress-Bzip2Upgrade perl-Compress-Raw-ZlibUpgrade perl-Log-Message-SimpleUpgrade perl-Archive-TarUpgrade perl-Archive-ExtractUpgrade perl-parentUpgrade perl-Module-CoreListUpgrade perl-Package-ConstantsUpgrade perl-Module-PluggableUpgrade perl-Digest-SHAUpgrade perl-IO-Compress-ZlibUpgrade perl-Log-MessageUpgrade perl-Term-UIUpgrade perl-ExtUtils-CBuilderUpgrade perl-Object-AccessorUpgrade perl-Time-HiResUpgrade perl-CGIUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Time-PieceUpgrade perl-Pod-EscapesUpgrade perl-coreUpgrade perl-Params-CheckUpgrade perl-CPANPLUSUpgrade perl-ExtUtils-EmbedUpgrade perl-Module-LoadedUpgrade perl-Test-SimpleUpgrade perl-Test-HarnessUpgrade perl-develUpgrade perl-Module-LoadUpgrade perl-Pod-SimpleUpgrade perl-versionUpgrade perl-Module-BuildUpgrade perl-Parse-CPAN-MetaUpgrade perl-CPANUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Module-Load-ConditionalUpgrade perl-IPC-CmdUpgrade perl-Compress-ZlibUpgrade perl-File-FetchUpgrade perl-IO-ZlibUpgrade perl-libsUpgrade perl-IO-Compress-BaseUpgrade perl-ExtUtils-ParseXSUpgrade perlUpgrade perl-suidperl | Dec 1, 2016 | Jan 4, 2013 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Jan 4, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 15, 2015 |
| Gentoo Linux | — | Upgrade dev-lang/perl.Upgrade perl-core/Locale-Maketext. | Oct 30, 2017 | Jan 4, 2013 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory4 | Nov 30, 2017 | Jan 4, 2013 |
| Oracle Solaris | — | Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade runtime/perl-512 to version 5.12.5-0.175.1.7.0.2.0 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade runtime/perl-584 to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1 | May 29, 2017 | Jan 4, 2013 |
| Oracle_linux | — | Upgrade perl-suidperlUpgrade perl-Object-AccessorUpgrade perl-Test-SimpleUpgrade perl-Log-MessageUpgrade perl-CGIUpgrade perl-ExtUtils-ParseXSUpgrade perl-Test-HarnessUpgrade perl-Digest-SHAUpgrade perlUpgrade perl-parentUpgrade perl-coreUpgrade perl-Compress-Raw-ZlibUpgrade perl-develUpgrade perl-Params-CheckUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Module-LoadUpgrade perl-ExtUtils-MakeMakerUpgrade perl-ExtUtils-EmbedUpgrade perl-Package-ConstantsUpgrade perl-Module-BuildUpgrade perl-IO-ZlibUpgrade perl-Module-PluggableUpgrade perl-libsUpgrade perl-IO-Compress-Bzip2Upgrade perl-Time-HiResUpgrade perl-Time-PieceUpgrade perl-versionUpgrade perl-CPANUpgrade perl-Pod-SimpleUpgrade perl-Archive-ExtractUpgrade perl-CPANPLUSUpgrade perl-ExtUtils-CBuilderUpgrade perl-Parse-CPAN-MetaUpgrade perl-File-FetchUpgrade perl-IPC-CmdUpgrade perl-Archive-TarUpgrade perl-IO-Compress-ZlibUpgrade perl-Module-LoadedUpgrade perl-Term-UIUpgrade perl-Compress-Raw-Bzip2Upgrade perl-IO-Compress-BaseUpgrade perl-Log-Message-SimpleUpgrade perl-Compress-ZlibUpgrade perl-Module-Load-ConditionalUpgrade perl-Pod-EscapesUpgrade perl-Module-CoreList | Oct 16, 2024 | Jan 4, 2013 |
| Suse | — | Upgrade perl-debuginfo-32bitUpgrade perl-32bitUpgrade perl-base-x86Upgrade perl-baseUpgrade perlUpgrade perl-debugsourceUpgrade perl-base-32bitUpgrade perl-64bitUpgrade perl-docUpgrade perl-base-debuginfo-x86Upgrade perl-x86Upgrade perl-base-debuginfoUpgrade perl-base-debuginfo-32bitUpgrade perl-debuginfoUpgrade perl-debuginfo-x86 | Feb 17, 2015 | Jan 4, 2013 |
| Ubuntu | — | Upgrade perl-modules | Nov 8, 2024 | Jan 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub