CVE-2010-4802 - CVE House
Back to Database
Status published Critical CVE-2010-4802

Commands.pm in Mojolicious before 0.999928 does not properly perform CGI...

Vulnerability Description

Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment detection, which has unspecified impact and remote attack vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-4802

Credits & Attribution

No credits recorded in the NVD database.

References

More from mojolicious

View All →
CVE-2021-47208
The Mojolicious module before 9.11 for Perl has a bug...
Unknown 0
CVE-2011-1841
Cross-site scripting (XSS) vulnerability in the link_to helper in Mojolicious...
Medium 4.3
CVE-2011-1589
Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows...
Medium 5
CVE-2010-4803
Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which...
Critical 10
CVE-2009-5074
Unspecified vulnerability in the MojoX::Dispatcher::Static implementation in Mojolicious before 0.991250...
Critical 10

Affected Vendor

mojolicious

View all reports →

Affected Software

mojolicious
Vulnerable Versions:
0, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.9, 0.8006, 0.8007, 0.8008, 0.8009, 0.9001, 0.9002, 0.991231, 0.991232, 0.991233, 0.991234, 0.991235, 0.991236, 0.991237, 0.991238, 0.991239, 0.991240, 0.991241, 0.991242, 0.991243, 0.991244, 0.991245, 0.991246, 0.991250, 0.991251, 0.999901, 0.999902, 0.999903, 0.999904, 0.999905, 0.999906, 0.999907, 0.999908, 0.999909, 0.999910, 0.999911, 0.999912, 0.999913, 0.999914, 0.999920, 0.999921, 0.999922, 0.999923, 0.999924, 0.999925, 0.999926

Timeline

Official Publish: May 3rd, 2011
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.