Description

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.

Remediation

References

CVE-2016-2381

Related Vulnerabilities

WordPress Plugin dwnldr Cross-Site Scripting (1.0)

WordPress Plugin Events Shortcodes For The Events Calendar Cross-Site Scripting (1.7.1)

WordPress Plugin WordPress Backup and Migrate-Backup Guard Cross-Site Scripting (1.1.46)

WordPress Plugin jRSS Widget Server-Side Request Forgery (1.2)

WordPress Plugin Thrive Comments Security Bypass (1.4.15.2)

Severity

High

Classification

CVE-2016-2381 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities