CVE-2013-7329

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.88%

Published

Oct 6, 2014

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The CGI::Application module before 4.50_50 and 4.50_51 for Perl, when run modes are not specified, allows remote attackers to obtain sensitive information (web queries and environment details) via vectors related to the dump_html function.

Weaknesses (CWE)

CWE-200

Affected Products (1)

perl · cgi_application_modulevulnerable

References (18)

http://lists.fedoraproject.org/pipermail/package-announce/2014-March/129436.html

http://lists.fedoraproject.org/pipermail/package-announce/2014-March/129444.html

http://openwall.com/lists/oss-security/2014/02/19/11

http://www.securityfocus.com/bid/65687

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739505

https://bugzilla.redhat.com/show_bug.cgi?id=1067180

https://exchange.xforce.ibmcloud.com/vulnerabilities/91735

https://github.com/markstos/CGI--Application/pull/15

https://rt.cpan.org/Public/Bug/Display.html?id=84403