CVEs-PoC/2017/CVE-2017-10672.md

CVE-2017-10672

Description

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

POC

Reference

• https://hackerone.com/reports/259390
• https://hackerone.com/reports/259390
• https://rt.cpan.org/Public/Bug/Display.html?id=122246
• https://rt.cpan.org/Public/Bug/Display.html?id=122246

Github

• https://github.com/ARPSyndicate/cvemon