{“lastseen”:””,”description”:”Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting.\\n\\nPlack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the client via the X-Sendfile-Type header, if it is not considered in the middleware constructor or the Plack environment.\\n\\nA malicious client can set the X-Sendfile-Type header to \\”X-Accel-Redirect\\” to services running behind nginx reverse proxies, and then set the X-Accel-Mapping to map the path to an arbitrary file on the server.\\n\\nSince 1.0053, Plack::Middleware::XSendfile is deprecated and will be removed from future releases of Plack.\\n\\nThis is similar to CVE-2025-61780 for Rack::Sendfile, although Plack::Middleware::XSendfile has some mitigations that disallow regular expressions to be used in the mapping, and only apply the mapping for the \\”X-Accel-Redirect\\” type.”,”published”:”2026-04-29T22:13:35.351Z”,”modified”:”2026-04-30T13:18:45.937Z”,”type”:”cve”,”title”:”Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting”,”source”:”CPANSec”,”references”:”https:\/\/metacpan.org\/release\/MIYAGAWA\/Plack-1.0053\/changes\\nhttps:\/\/metacpan.org\/release\/MIYAGAWA\/Plack-1.0053\/view\/lib\/Plack\/Middleware\/XSendfile.pm#DEPRECATION-NOTICE\\nhttps:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-61780″,”id”:”CVE-2026-7381″,”bulletinFamily”:””,”cwe”:[“CWE-200″,”CWE-441″,”CWE-913″],”cvelist”:null,”sourceData”:”MIYAGAWA Plack::Middleware::XSendfile 0″,”sourceHref”:””,”cvss”:{“score”:9.1,”severity”:”CRITICAL”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:N”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”Plack::Middleware::XSendfile”,”version”:”0″,”vendor”:”MIYAGAWA”,”ai_description”:”Client-controlled path rewriting vulnerability in Plack::Middleware::XSendfile through version 1.0053″,”ai_severity”:”Critical”,”ai_vendor”:”MIYAGAWA”,”ai_product”:”Plack::Middleware::XSendfile”,”ai_version”:”through 1.0053″,”ai_score”:9.1}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting.\\n\\nPlack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the client via the…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[9,6,8,10,12,13,7,11,5],"class_list":["post-50426","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-critical","tag-cve","tag-cvss","tag-cvss-91","tag-exploit","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n