CVE-2011-2201: Mark Stosberg Data::formvalidator

Medium severity, CVSS 4.3. EPSS: 6.9% chance of exploitation in the next 30 days.

The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input.

Affected products

• Mark Stosberg Data::formvalidator: up to and including 4.66; version 1.3 only; version 1.4 only; version 1.5 only; version 1.5.1 only; version 1.6 only; …

Published 2011-09-14. Last modified 2026-06-16.