Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses
Vulnerability Description
Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally using octal notation, as well as users who believe they are using decimal notation. Net::CIDR::Set used code from Net::CIDR::Lite, which had a similar vulnerability CVE-2021-47154.
CVSS Information
N/A
Vulnerability Type
CWE-1287
Vulnerability Title
MetaCPAN Net::CIDR::Set 安全漏洞
Vulnerability Description
MetaCPAN Net::CIDR::Set是MetaCPAN基金会的一个库。 MetaCPAN Net::CIDR::Set 0.10至0.13版本存在安全漏洞，该漏洞源于未正确处理IP CIDR地址字符串中的前导零，可能导致访问控制绕过。
CVSS Information
N/A
Vulnerability Type
N/A