Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses
Vulnerability Description
Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally using octal notation, as well as users who believe they are using decimal notation.
CVSS Information
N/A
Vulnerability Type
CWE-1287
Vulnerability Title
Net::IP::LPM 安全漏洞
Vulnerability Description
Net::IP::LPM是Tomas Podermanski个人开发者的一个 Perl 模块，用于实现最长前缀匹配（Longest Prefix Matching，LPM）算法。 Net::IP::LPM 1.10版本存在安全漏洞，该漏洞源于未正确处理IP地址前导零，可能导致访问控制绕过。
CVSS Information
N/A
Vulnerability Type
N/A