CVE-2024-45321

Опубликовано: 27 авг. 2024

Источник: nvd

CVSS3: 8.1

CVSS3: 9.8

EPSS Низкий

Описание

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

Ссылки

https://github.com/miyagawa/cpanminus/issues/611
Issue Tracking
https://github.com/miyagawa/cpanminus/pull/674
Issue Tracking
Patch
https://security.metacpan.org/2024/08/26/cpanminus-downloads-code-using-insecure-http.html
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:app\:\:cpanminus_project:app\:\:cpanminus:*:*:*:*:*:perl:*:*

Версия до 1.7047 (включая)

EPSS

Процентиль: 28%

0.00099

Низкий

8.1 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-494

Связанные уязвимости

CVE-2024-45321

CVSS3: 8.1

ubuntu

12 месяцев назад

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

CVE-2024-45321

CVSS3: 8.1

redhat

12 месяцев назад

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

CVE-2024-45321

CVSS3: 8.1

debian

12 месяцев назад

The App::cpanminus package through 1.7047 for Perl downloads code via ...

GHSA-9mmm-86g7-vp9g

CVSS3: 9.8

github

12 месяцев назад

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

ELSA-2024-10219

oracle-oval

9 месяцев назад

ELSA-2024-10219: perl-App-cpanminus:1.7044 security update (MODERATE)

EPSS

Процентиль: 28%

0.00099

Низкий

8.1 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-494