Vulnerabilities > Mojolicious > Mojolicious > 0.999950

DATE CVE VULNERABILITY TITLE RISK
2011-05-03 CVE-2011-1841 Cross-Site Scripting vulnerability in Mojolicious
Cross-site scripting (XSS) vulnerability in the link_to helper in Mojolicious before 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
2011-04-29 CVE-2011-1589 Path Traversal vulnerability in Mojolicious
Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f (encoded slash dot dot slash) in a URI.
network
low complexity
mojolicious CWE-22
5.0