Security Advisories (1)
CVE-2017-16248 (2017-10-31)

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character.

Changes for version 0.31 - 2013-09-09

  • Updated docs to reflect config key change from 'static' to 'Plugin::Static::Simple' (RT#77709)
  • Migrated repository from subversion to git
  • Fixed MIME::Types 2.xx compatibility be removing call to an undocumented method
  • Bumped the MIME::Types requirement to 2.03 to ensure its improvements make it into Catalyst environments

Modules

Make serving static pages painless.