AZL-62239
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-62239.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-62239
- Upstream
- Published
- 2025-06-05T12:15:22Z
- Modified
- 2026-04-21T04:31:58.370491Z
- Summary
- CVE-2011-10007 affecting package perl-File-Find-Rule 0.34-15
- Details
-
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when
grep()encounters a crafted filename.A file handle is opened with the 2 argument form of
open()allowing an attacker controlled filename to provide the MODE parameter toopen(), turning the filename into a command to be executed.Example:
$ mkdir /tmp/poc; echo > "/tmp/poc/|id" $ perl -MFile::Find::Rule \ -E 'File::Find::Rule->grep("foo")->in("/tmp/poc")' uid=1000(user) gid=1000(user) groups=1000(user),100(users)
- References