HTTP-Body 1.20
Security Advisories
CVE-2013-4407
HTTP::Body::Multipart in the HTTP-Body 1.08, 1.22, and earlier module for Perl uses the part of the uploaded file's name after the first "." character as the suffix of a temporary file, which makes it easier for remote attackers to conduct attacks by leveraging subsequent behavior that may assume the suffix is well-formed.
- https://www.openwall.com/lists/oss-security/2024/04/07/1
- https://security-tracker.debian.org/tracker/CVE-2013-4407
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=721634
Fixed version: >=1.23
Severity: moderate
Reported: 2013-09-02
Kwalitee Issues
No Core Issues.
- meta_yml_declares_perl_version
-
If you are using Build.PL define the {requires}{perl} = VERSION field. If you are using MakeMaker (Makefile.PL) you should upgrade ExtUtils::MakeMaker to 6.48 and use MIN_PERL_VERSION parameter. Perl::MinimumVersion can help you determine which version of Perl your module needs.
- has_meta_json
-
Add a META.json to the distribution. Your buildtool should be able to autogenerate it.
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: HTTP::Body, HTTP::Body::MultiPart, HTTP::Body::OctetStream, HTTP::Body::UrlEncoded, HTTP::Body::XForms, HTTP::Body::XFormsMultipart
- test_prereq_matches_use
-
List all modules used in the test suite in META.yml test_requires
Error:
- HTTP::Message::PSGI
- meta_yml_has_provides
-
Add all modules contained in this distribution to the META.yml field 'provides'. Module::Build or Dist::Zilla::Plugin::MetaProvides do this automatically for you.
Modules
Name | Abstract | Version | View |
---|---|---|---|
HTTP::Body | HTTP Body Parser | 1.20 | metacpan |
HTTP::Body::MultiPart | HTTP Body Multipart Parser | 1.20 | metacpan |
HTTP::Body::OctetStream | HTTP Body OctetStream Parser | 1.20 | metacpan |
HTTP::Body::UrlEncoded | HTTP Body UrlEncoded Parser | 1.20 | metacpan |
HTTP::Body::XForms | HTTP Body XForms Parser | 1.20 | metacpan |
HTTP::Body::XFormsMultipart | HTTP Body XForms multipart/related submission Parser | 1.20 | metacpan |