What is GHSA-g8c2-c7gg-5qx3?

GHSA-g8c2-c7gg-5qx3 is a security advisory published by GitHub Security Advisories with unknown severity. HTTP::Session versions before 0.43 for Perl allow memcached command injection via unfiltered...

Which CVE IDs does GHSA-g8c2-c7gg-5qx3 cover?

GHSA-g8c2-c7gg-5qx3 covers the following CVE IDs: CVE-2011-10042. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-g8c2-c7gg-5qx3unknown

HTTP::Session versions before 0.43 for Perl allow memcached command injection via unfiltered...

Vendor

GitHub Security Advisories

Published

November 14, 2026

Last Modified

November 14, 2026

🔗 CVE IDs covered (1)

CVE-2011-10042 →

📋 Description

HTTP::Session versions before 0.43 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::Memcached.

The session id from the client's cookie reaches memcached unchanged as the cache key.

A CR and LF in the session id end the cache command early, and the server reads the bytes after them as further commands.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2011-10042
https://github.com/tokuhirom/http-session/commit/039345db9bc9311868019fde67b89c355114a3d3.patch
https://metacpan.org/release/TOKUHIROM/HTTP-Session-0.42/changes
https://github.com/advisories/GHSA-g8c2-c7gg-5qx3