Threat Intelligence Database

Web::Simple versions before 0.035 for Perl contain a vulnerability where the Content-Length header is used to allocate memory for urlencoded body parameters without proper size checks. This can lead to excessive memory allocation when an attacker sends a large Content-Length value that does not match the actual body size. The vulnerability affects routes using % body-parameter matches and requires no authentication.