CVE-2010-4802

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-05-03 · updated 2026-06-16
Weakness: CWE-20

Description

Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment detection, which has unspecified impact and remote attack vectors.

Affected products

SRI Mojolicious: through 0.999927; 0.2, 0.3, 0.4, 0.5, 0.6, 0.7 (+52)

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622952
http://cpansearch.perl.org/src/KRAIH/Mojolicious-1.20/Changes
http://www.debian.org/security/2011/dsa-2239
https://github.com/kraih/mojo/commit/aa7c8da54b1ebd4ccb64aa66dede7b7cdb381c44
https://github.com/kraih/mojo/commit/b3a1fb453eda447c0bb082cd9eed81bb75a7564a
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622952
http://cpansearch.perl.org/src/KRAIH/Mojolicious-1.20/Changes
http://www.debian.org/security/2011/dsa-2239
https://github.com/kraih/mojo/commit/aa7c8da54b1ebd4ccb64aa66dede7b7cdb381c44
https://github.com/kraih/mojo/commit/b3a1fb453eda447c0bb082cd9eed81bb75a7564a

Get alerted when CVE-2010-4802 or the next vulnerability affects your stack