exploitDog

GHSA-m92x-373g-xc36

Опубликовано: 10 фев. 2022

Источник: github

Github: Не прошло ревью

Описание

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2020-16154
https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DENFY4CRTIZL5WYYUYUM4VKCJNXO4QIW
https://metacpan.org/pod/App::cpanminus

EPSS

Процентиль: 49%

0.00713

Низкий

CVE ID

Дефекты

CWE-347

Связанные уязвимости

CVE-2020-16154

CVSS3: 7.8

ubuntu

больше 4 лет назад

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.

CVE-2020-16154

CVSS3: 7.8

redhat

почти 5 лет назад

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.

CVE-2020-16154

CVSS3: 7.8

nvd

больше 4 лет назад

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.

CVE-2020-16154

CVSS3: 7.8

debian

больше 4 лет назад

The App::cpanminus package 1.7044 for Perl allows Signature Verificati ...

openSUSE-SU-2022:0074-1

suse-cvrf

больше 4 лет назад

Security update for perl-App-cpanminus

EPSS

Процентиль: 49%

0.00713

Низкий

CVE ID

Дефекты

CWE-347