Pathtools
1 CVEs
product
Monthly
The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Ubuntu Linux
Pathtools
Debian Linux
NVD
CVSS 3.0
7.3
EPSS
5.7%
EPSS 6%
CVSS 7.3
HIGH
This Week
The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Ubuntu Linux
Pathtools
+1
NVD