CVE-2015-8607

The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might…

published January 13, 2016

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03124 · 87.8th percentile
Published
2016-01-13T15:00Z
EPSS history
Timeline
  • 13 JAN 15:00Z
    The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might…
    cvelistv5