The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users, as demonstrated by the TWiki application before 5.1.3, and the Foswiki application 1.0.x through 1.0.10 and 1.1.x through 1.1.6.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-Module-BuildUpgrade perl-Module-LoadUpgrade perl-Module-LoadedUpgrade perl-CPANUpgrade perl-suidperlUpgrade perl-File-FetchUpgrade perl-develUpgrade perl-Test-HarnessUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Compress-ZlibUpgrade perl-libsUpgrade perl-Module-Load-ConditionalUpgrade perl-Pod-SimpleUpgrade perlUpgrade perl-Parse-CPAN-MetaUpgrade perl-IO-Compress-BaseUpgrade perl-IO-ZlibUpgrade perl-IPC-CmdUpgrade perl-ExtUtils-ParseXSUpgrade perl-versionUpgrade perl-Test-SimpleUpgrade perl-IO-Compress-Bzip2Upgrade perl-coreUpgrade perl-Log-Message-SimpleUpgrade perl-parentUpgrade perl-Module-PluggableUpgrade perl-Params-CheckUpgrade perl-Module-CoreListUpgrade perl-Compress-Raw-ZlibUpgrade perl-Log-MessageUpgrade perl-Archive-TarUpgrade perl-CPANPLUSUpgrade perl-Time-HiResUpgrade perl-Term-UIUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Object-AccessorUpgrade perl-Digest-SHAUpgrade perl-Archive-ExtractUpgrade perl-CGIUpgrade perl-Time-PieceUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-EmbedUpgrade perl-ExtUtils-CBuilderUpgrade perl-IO-Compress-ZlibUpgrade perl-Pod-EscapesUpgrade perl-Package-Constants | Dec 1, 2016 | Jan 4, 2013 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Jan 4, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 15, 2015 |
| Gentoo Linux | — | Upgrade dev-lang/perl.Upgrade perl-core/Locale-Maketext. | Oct 30, 2017 | Jan 4, 2013 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory4 | Nov 30, 2017 | Jan 4, 2013 |
| Oracle Solaris | — | Upgrade runtime/perl-512 to version 5.12.5-0.175.1.7.0.2.0 on Solaris 11.1Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade runtime/perl-584 to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1 | May 29, 2017 | Jan 4, 2013 |
| Oracle_linux | — | Upgrade perl-ExtUtils-EmbedUpgrade perl-Time-PieceUpgrade perl-coreUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Log-MessageUpgrade perl-libsUpgrade perl-Time-HiResUpgrade perl-develUpgrade perl-suidperlUpgrade perlUpgrade perl-Object-AccessorUpgrade perl-IO-Compress-Bzip2Upgrade perl-Digest-SHAUpgrade perl-parentUpgrade perl-Params-CheckUpgrade perl-Module-BuildUpgrade perl-CGIUpgrade perl-Compress-Raw-ZlibUpgrade perl-Module-LoadUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Test-SimpleUpgrade perl-IO-ZlibUpgrade perl-Module-PluggableUpgrade perl-Test-HarnessUpgrade perl-ExtUtils-ParseXSUpgrade perl-Package-ConstantsUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Term-UIUpgrade perl-Archive-TarUpgrade perl-IO-Compress-BaseUpgrade perl-Parse-CPAN-MetaUpgrade perl-Module-LoadedUpgrade perl-versionUpgrade perl-Module-Load-ConditionalUpgrade perl-Log-Message-SimpleUpgrade perl-Pod-EscapesUpgrade perl-Archive-ExtractUpgrade perl-CPANPLUSUpgrade perl-IPC-CmdUpgrade perl-Module-CoreListUpgrade perl-Compress-ZlibUpgrade perl-CPANUpgrade perl-IO-Compress-ZlibUpgrade perl-Pod-SimpleUpgrade perl-File-FetchUpgrade perl-ExtUtils-CBuilder | Oct 16, 2024 | Jan 4, 2013 |
| Suse | — | Upgrade perlUpgrade perl-x86Upgrade perl-base-32bitUpgrade perl-Test-SimpleUpgrade perl-docUpgrade perl-baseUpgrade perl-Module-BuildUpgrade perl-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade perl-modules | Nov 8, 2024 | Jan 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub