VULNERABILITY INTELLIGENCE
CVE-2013-4407
CVSS score6.8 MEDIUM
EPSS probability2.88%
CISA KEVNot currently listed
Published2013-11-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
HTTP::Body::Multipart in the HTTP-Body module for Perl (1.07 through 1.22, before 1.23) uses the part of the uploaded file's name after the first "." character as the suffix of a temporary file, which makes it easier for remote attackers to conduct attacks by leveraging subsequent behavior that may assume the suffix is well-formed.