CVE-2013-4407

Published: Nov 23, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

HTTP::Body::Multipart in the HTTP-Body module for Perl (1.07 through 1.22, before 1.23) uses the part of the uploaded file's name after the first "." character as the suffix of a temporary file, which makes it easier for remote attackers to conduct attacks by leveraging subsequent behavior that may assume the suffix is well-formed.

Affected (26)

Products: Http Body Project: Http Body

Http Body Project

1 product

Http Body

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Http Body Project Http Body	version ≤ 1.17
Http Body Project Http Body	Version 0.01
Http Body Project Http Body	Version 0.03
Http Body Project Http Body	Version 0.2
Http Body Project Http Body	Version 0.4
Http Body Project Http Body	Version 0.5
Http Body Project Http Body	Version 0.6
Http Body Project Http Body	Version 0.7
Http Body Project Http Body	Version 0.8
Http Body Project Http Body	Version 0.9
Http Body Project Http Body	Version 1.00
Http Body Project Http Body	Version 1.01
Http Body Project Http Body	Version 1.02
Http Body Project Http Body	Version 1.03
Http Body Project Http Body	Version 1.04
Http Body Project Http Body	Version 1.05
Http Body Project Http Body	Version 1.06
Http Body Project Http Body	Version 1.07
Http Body Project Http Body	Version 1.08
Http Body Project Http Body	Version 1.09
Http Body Project Http Body	Version 1.10
Http Body Project Http Body	Version 1.11
Http Body Project Http Body	Version 1.12
Http Body Project Http Body	Version 1.14
Http Body Project Http Body	Version 1.15
Http Body Project Http Body	Version 1.16