Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Jifty

cpan

an application framework

View on metacpan.org

Security Advisories for Jifty in cpan

over 15 years ago

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment. CPANSA-Jifty-2011-01

cpan Jifty
over 17 years ago

The REST plugin would let you call any method on the model. CPANSA-Jifty-2009-01

cpan Jifty
over 17 years ago

Allowed all actions on GET. CPANSA-Jifty-2008-01

cpan Jifty
about 20 years ago

Jifty did not protect users against a class of remote data access vulnerability. If an attacker knew the structure of your local filesystem and you were using the "standalone" webserver in production, the attacker could gain read only access to local f... CPANSA-Jifty-2006-01

cpan Jifty

Filter by Severity