Количество 9
Количество 9
CVE-2026-15392
DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories. Callers of file-based drivers can read or write files outside of the data directory.
CVE-2026-15392
DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories. Callers of file-based drivers can read or write files outside of the data directory.
CVE-2026-15392
DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories. Callers of file-based drivers can read or write files outside of the data directory.
CVE-2026-15392
DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location
CVE-2026-15392
DBD::File versions before 1.651 for Perl do not ensure the table file ...
openSUSE-SU-2026:21412-1
Security update for perl-DBI
SUSE-SU-2026:3461-1
Security update for perl-DBI
SUSE-SU-2026:3415-1
Security update for perl-DBI
SUSE-SU-2026:3283-1
Security update for perl-DBI
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories. Callers of file-based drivers can read or write files outside of the data directory. | CVSS3: 7.7 | 0% Низкий | 28 дней назад |
 | CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories. Callers of file-based drivers can read or write files outside of the data directory. | CVSS3: 6.3 | 0% Низкий | 28 дней назад |
 | CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories. Callers of file-based drivers can read or write files outside of the data directory. | CVSS3: 7.7 | 0% Низкий | 28 дней назад |
 | CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location | CVSS3: 7.7 | 0% Низкий | 25 дней назад |
| CVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file ... | CVSS3: 7.7 | 0% Низкий | 28 дней назад |
 | openSUSE-SU-2026:21412-1 Security update for perl-DBI | 20 дней назад | ||
| SUSE-SU-2026:3461-1 Security update for perl-DBI | 8 дней назад | ||
| SUSE-SU-2026:3415-1 Security update for perl-DBI | 12 дней назад | ||
| SUSE-SU-2026:3283-1 Security update for perl-DBI | 15 дней назад |
Уязвимостей на страницу