Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101154
HistoryDec 15, 2021 - 12:00 a.m.

cpanminus data forgery issue vulnerability

2021-12-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.002 Low

EPSS

Percentile

53.4%

cpanminus is a script that obtains, unpacks, builds and installs modules from CPAN without performing any other actions. cpanminus version 2.28 has a security vulnerability that stems from packages allowing signature verification to be bypassed. No details of the vulnerability are currently available.

CPENameOperatorVersion
cpanminus cpanminuseq2.28