Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34042
HistoryFeb 08, 2022 - 2:48 a.m.

Incorrect Signature Verification

2022-02-0802:48:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

0.001 Low

EPSS

Percentile

44.6%

cpanminus, sid is vulnerable to signature verification bypass. The vulnerability exists due to a lack of input sanitization allow attacker to prepend checksums for modified packages to the beginning of CHECKSUMS files,