Read the docs
TI-2011-01408 Aliases CVE-2011-1589GHSA-vrwf-2wgx-949w

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote…

Priority LOW 29CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f (encoded slash dot dot slash) in a URI.

Why it matters now

EPSS 0.0388 90th percentileScored 2026-11-07
Public exploit Yes 7 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 82

CPEVersionsRoleVendor
cpe:2.3:a:mojolicious:mojolicious:0.2:*:*:*:*:*:*:*0.2VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.3:*:*:*:*:*:*:*0.3VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.4:*:*:*:*:*:*:*0.4VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.5:*:*:*:*:*:*:*0.5VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.6:*:*:*:*:*:*:*0.6VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.7:*:*:*:*:*:*:*0.7VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.8:*:*:*:*:*:*:*0.8VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.8.1:*:*:*:*:*:*:*0.8.1VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.8.2:*:*:*:*:*:*:*0.8.2VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.8.3:*:*:*:*:*:*:*0.8.3VulnerableMojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.2:*:*:*:*:*:*:* Versions 0.2 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.3:*:*:*:*:*:*:* Versions 0.3 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.4:*:*:*:*:*:*:* Versions 0.4 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.5:*:*:*:*:*:*:* Versions 0.5 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.6:*:*:*:*:*:*:* Versions 0.6 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.7:*:*:*:*:*:*:* Versions 0.7 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.8:*:*:*:*:*:*:* Versions 0.8 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.8.1:*:*:*:*:*:*:* Versions 0.8.1 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.8.2:*:*:*:*:*:*:* Versions 0.8.2 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.8.3:*:*:*:*:*:*:* Versions 0.8.3 Vulnerable ·Mojolicious
Show 72 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mojolicious:mojolicious:0.8.4:*:*:*:*:*:*:*0.8.4VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.8.5:*:*:*:*:*:*:*0.8.5VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.9:*:*:*:*:*:*:*0.9VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.8006:*:*:*:*:*:*:*0.8006VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.8007:*:*:*:*:*:*:*0.8007VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.8008:*:*:*:*:*:*:*0.8008VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.8009:*:*:*:*:*:*:*0.8009VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.9001:*:*:*:*:*:*:*0.9001VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.9002:*:*:*:*:*:*:*0.9002VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991231:*:*:*:*:*:*:*0.991231VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991232:*:*:*:*:*:*:*0.991232VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991233:*:*:*:*:*:*:*0.991233VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991234:*:*:*:*:*:*:*0.991234VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991235:*:*:*:*:*:*:*0.991235VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991236:*:*:*:*:*:*:*0.991236VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991237:*:*:*:*:*:*:*0.991237VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991238:*:*:*:*:*:*:*0.991238VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991239:*:*:*:*:*:*:*0.991239VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991240:*:*:*:*:*:*:*0.991240VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991241:*:*:*:*:*:*:*0.991241VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991242:*:*:*:*:*:*:*0.991242VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991243:*:*:*:*:*:*:*0.991243VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991244:*:*:*:*:*:*:*0.991244VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991245:*:*:*:*:*:*:*0.991245VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991246:*:*:*:*:*:*:*0.991246VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991250:*:*:*:*:*:*:*0.991250VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.991251:*:*:*:*:*:*:*0.991251VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999901:*:*:*:*:*:*:*0.999901VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999902:*:*:*:*:*:*:*0.999902VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999903:*:*:*:*:*:*:*0.999903VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999904:*:*:*:*:*:*:*0.999904VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999905:*:*:*:*:*:*:*0.999905VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999906:*:*:*:*:*:*:*0.999906VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999907:*:*:*:*:*:*:*0.999907VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999908:*:*:*:*:*:*:*0.999908VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999909:*:*:*:*:*:*:*0.999909VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999910:*:*:*:*:*:*:*0.999910VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999911:*:*:*:*:*:*:*0.999911VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999912:*:*:*:*:*:*:*0.999912VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999913:*:*:*:*:*:*:*0.999913VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999914:*:*:*:*:*:*:*0.999914VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999920:*:*:*:*:*:*:*0.999920VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999921:*:*:*:*:*:*:*0.999921VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999922:*:*:*:*:*:*:*0.999922VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999923:*:*:*:*:*:*:*0.999923VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999924:*:*:*:*:*:*:*0.999924VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999925:*:*:*:*:*:*:*0.999925VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999926:*:*:*:*:*:*:*0.999926VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999927:*:*:*:*:*:*:*0.999927VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999928:*:*:*:*:*:*:*0.999928VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999929:*:*:*:*:*:*:*0.999929VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999930:*:*:*:*:*:*:*0.999930VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999931:*:*:*:*:*:*:*0.999931VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999932:*:*:*:*:*:*:*0.999932VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999933:*:*:*:*:*:*:*0.999933VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999934:*:*:*:*:*:*:*0.999934VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999935:*:*:*:*:*:*:*0.999935VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999936:*:*:*:*:*:*:*0.999936VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999937:*:*:*:*:*:*:*0.999937VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999938:*:*:*:*:*:*:*0.999938VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999939:*:*:*:*:*:*:*0.999939VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999940:*:*:*:*:*:*:*0.999940VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999941:*:*:*:*:*:*:*0.999941VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:0.999950:*:*:*:*:*:*:*0.999950VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:1.0:*:*:*:*:*:*:*1.0VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:1.1:*:*:*:*:*:*:*1.1VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:1.01:*:*:*:*:*:*:*1.01VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:1.11:*:*:*:*:*:*:*1.11VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:1.12:*:*:*:*:*:*:*1.12VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:1.13:*:*:*:*:*:*:*1.13VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:1.14:*:*:*:*:*:*:*1.14VulnerableMojolicious
cpe:2.3:a:mojolicious:mojolicious:1.15:*:*:*:*:*:*:*1.15VulnerableMojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.8.4:*:*:*:*:*:*:* Versions 0.8.4 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.8.5:*:*:*:*:*:*:* Versions 0.8.5 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.9:*:*:*:*:*:*:* Versions 0.9 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.8006:*:*:*:*:*:*:* Versions 0.8006 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.8007:*:*:*:*:*:*:* Versions 0.8007 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.8008:*:*:*:*:*:*:* Versions 0.8008 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.8009:*:*:*:*:*:*:* Versions 0.8009 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.9001:*:*:*:*:*:*:* Versions 0.9001 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.9002:*:*:*:*:*:*:* Versions 0.9002 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991231:*:*:*:*:*:*:* Versions 0.991231 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991232:*:*:*:*:*:*:* Versions 0.991232 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991233:*:*:*:*:*:*:* Versions 0.991233 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991234:*:*:*:*:*:*:* Versions 0.991234 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991235:*:*:*:*:*:*:* Versions 0.991235 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991236:*:*:*:*:*:*:* Versions 0.991236 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991237:*:*:*:*:*:*:* Versions 0.991237 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991238:*:*:*:*:*:*:* Versions 0.991238 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991239:*:*:*:*:*:*:* Versions 0.991239 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991240:*:*:*:*:*:*:* Versions 0.991240 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991241:*:*:*:*:*:*:* Versions 0.991241 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991242:*:*:*:*:*:*:* Versions 0.991242 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991243:*:*:*:*:*:*:* Versions 0.991243 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991244:*:*:*:*:*:*:* Versions 0.991244 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991245:*:*:*:*:*:*:* Versions 0.991245 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991246:*:*:*:*:*:*:* Versions 0.991246 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991250:*:*:*:*:*:*:* Versions 0.991250 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.991251:*:*:*:*:*:*:* Versions 0.991251 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999901:*:*:*:*:*:*:* Versions 0.999901 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999902:*:*:*:*:*:*:* Versions 0.999902 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999903:*:*:*:*:*:*:* Versions 0.999903 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999904:*:*:*:*:*:*:* Versions 0.999904 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999905:*:*:*:*:*:*:* Versions 0.999905 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999906:*:*:*:*:*:*:* Versions 0.999906 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999907:*:*:*:*:*:*:* Versions 0.999907 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999908:*:*:*:*:*:*:* Versions 0.999908 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999909:*:*:*:*:*:*:* Versions 0.999909 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999910:*:*:*:*:*:*:* Versions 0.999910 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999911:*:*:*:*:*:*:* Versions 0.999911 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999912:*:*:*:*:*:*:* Versions 0.999912 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999913:*:*:*:*:*:*:* Versions 0.999913 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999914:*:*:*:*:*:*:* Versions 0.999914 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999920:*:*:*:*:*:*:* Versions 0.999920 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999921:*:*:*:*:*:*:* Versions 0.999921 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999922:*:*:*:*:*:*:* Versions 0.999922 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999923:*:*:*:*:*:*:* Versions 0.999923 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999924:*:*:*:*:*:*:* Versions 0.999924 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999925:*:*:*:*:*:*:* Versions 0.999925 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999926:*:*:*:*:*:*:* Versions 0.999926 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999927:*:*:*:*:*:*:* Versions 0.999927 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999928:*:*:*:*:*:*:* Versions 0.999928 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999929:*:*:*:*:*:*:* Versions 0.999929 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999930:*:*:*:*:*:*:* Versions 0.999930 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999931:*:*:*:*:*:*:* Versions 0.999931 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999932:*:*:*:*:*:*:* Versions 0.999932 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999933:*:*:*:*:*:*:* Versions 0.999933 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999934:*:*:*:*:*:*:* Versions 0.999934 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999935:*:*:*:*:*:*:* Versions 0.999935 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999936:*:*:*:*:*:*:* Versions 0.999936 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999937:*:*:*:*:*:*:* Versions 0.999937 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999938:*:*:*:*:*:*:* Versions 0.999938 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999939:*:*:*:*:*:*:* Versions 0.999939 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999940:*:*:*:*:*:*:* Versions 0.999940 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999941:*:*:*:*:*:*:* Versions 0.999941 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:0.999950:*:*:*:*:*:*:* Versions 0.999950 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:1.11:*:*:*:*:*:*:* Versions 1.11 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:1.12:*:*:*:*:*:*:* Versions 1.12 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:1.13:*:*:*:*:*:*:* Versions 1.13 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:1.14:*:*:*:*:*:*:* Versions 1.14 Vulnerable ·Mojolicious
  • cpe:2.3:a:mojolicious:mojolicious:1.15:*:*:*:*:*:*:* Versions 1.15 Vulnerable ·Mojolicious

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-1589
  2. 2026-10-03 Alias added: GHSA-vrwf-2wgx-949w
  3. 2026-10-13 EPSS moved to the 90th–95th percentile

References

Exploit 7

Patch 2

Advisory 3

Other 4

  • TI-2024-38343 Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session… CVSS 3.1MEDIUM 5.3
  • TI-2021-21869 The Mojolicious module before 9.11 for Perl has a bug in format detection that can… CVSS 3.1MEDIUM 4.3
  • TI-2010-04526 Mojolicious before 0.999927 does not properly implement HMAC-MD5 checksums, which has… CVSS 2.0HIGH 10.0
  • TI-2010-04525 Commands.pm in Mojolicious before 0.999928 does not properly perform CGI environment… CVSS 2.0HIGH 10.0
  • TI-2009-04826 Unspecified vulnerability in the MojoX::Dispatcher::Static implementation in Mojolicious… CVSS 2.0HIGH 10.0
  • TI-2024-38342 Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the… CVSS 3.1HIGH 8.1
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences