Security Advisories (1)
CVE-2013-4407 (2013-09-02)

HTTP::Body::Multipart in the HTTP-Body 1.08, 1.22, and earlier module for Perl uses the part of the uploaded file's name after the first "." character as the suffix of a temporary file, which makes it easier for remote attackers to conduct attacks by leveraging subsequent behavior that may assume the suffix is well-formed.

NAME

HTTP::Body::MultiPart - HTTP Body Multipart Parser

SYNOPSIS

use HTTP::Body::Multipart;

DESCRIPTION

HTTP Body Multipart Parser.

METHODS

init
spin
boundary
boundary_begin
boundary_end
crlf
delimiter_begin
delimiter_end
parse_preamble
parse_boundary
parse_header
parse_body
handler

AUTHOR

Christian Hansen, ch@ngmedia.com

LICENSE

This library is free software . You can redistribute it and/or modify it under the same terms as perl itself.