Описание
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections.
The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
EPSS
Процентиль: 23%
0.00306
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-93
Связанные уязвимости
CVSS3: 6.5
github
3 месяца назад
Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections. The metric names were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.
EPSS
Процентиль: 23%
0.00306
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-93