Perl HTTP::Body before 1.23_01 allows resource exhaustion
Three named flaws cover unlimited form parts, leftover multipart temp files, and quadratic CPU use; the note is cut off.
2 stories, newest first · one card per story
Three named flaws cover unlimited form parts, leftover multipart temp files, and quadratic CPU use; the note is cut off.
The visible flaws let one bad Content-Type parameter hide later parameters, including a multipart boundary.
Today 1.5K readers · 2.7K views · 2K reads · all time 160K views