Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Perl 输入验证错误漏洞
Vulnerability Description
Perl是Perl（PERL）社区的一款通用、解释型、动态的跨平台编程语言。 Perl平台下Module::Signature模块0.72之前版本中的cpansign验证功能中存在输入验证错误漏洞，该漏洞源于模块没有正确加载Digest/目录下的未知密码。攻击者可借助特制的SIGNATURE文件，利用该漏洞绕过签名检查并执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A