CVE-2015-1592

High

Published: 19/02/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Movable Type Pro, Open Source, and Advanced before version 5.2.12 and Pro and Advanced 6.0.x before version 6.0.7 improperly use the Perl Storable::thaw function, allowing remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code.

Risk Assessment

An attacker could exploit this vulnerability to execute code remotely, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to upgrade to the latest version of Movable Type to mitigate this vulnerability.

Other vulnerabilities in Movable Type Pro, Open Source, Advanced

CVE-2015-0845High
CVE-2015-0845 describes a format string vulnerability in Movable Type Pro, Open Source, and Advanced before version 5.2.13 and Pro and Advanced 6.0.x before version 6.0.8, allowing remote attackers to execute arbitrary code via vectors related to localization of templates.

Original NVD description (English source)

Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which allows remote attackers to include and execute arbitrary local Perl files and possibly execute arbitrary code via unspecified vectors.