CVE-2026-120645
2026-11-04
00h17 +00:00
00h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
CVE の説明
CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list.
When rendering option groups, scrolling_list marks the selected options by interpolating each selected value, by default taken from the request parameters, unescaped into a substitution pattern.
A client can make the request die with an invalid pattern, or tie up the process with one that backtracks heavily.
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Permissive Regular Expression The product uses a regular expression that does not sufficiently restrict the set of allowed values. |
||
| Inefficient Regular Expression Complexity The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential. |
