CVE-2015-8607
perl-PathTools: Taint propagation flaw in canonpath()
The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
CVSS 3.0 · 7.3 High
EPSS 3.1%
KEV · Not listed
Vendors
Products