8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
68.9%
HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | libhttp-tiny-perl | <= 0.082-2 | libhttp-tiny-perl_0.082-2_all.deb |
Debian | 999 | all | libhttp-tiny-perl | < 0.088-1 | libhttp-tiny-perl_0.088-1_all.deb |
Debian | 13 | all | libhttp-tiny-perl | < 0.088-1 | libhttp-tiny-perl_0.088-1_all.deb |
Debian | 12 | all | perl | <= 5.36.0-7+deb12u1 | perl_5.36.0-7+deb12u1_all.deb |
Debian | 11 | all | perl | <= 5.32.1-4+deb11u3 | perl_5.32.1-4+deb11u3_all.deb |
Debian | 999 | all | perl | < 5.38.2-2 | perl_5.38.2-2_all.deb |
Debian | 13 | all | perl | < 5.38.2-2 | perl_5.38.2-2_all.deb |