2 lines
2.8 KiB
JSON
2 lines
2.8 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","packageName":"Linux-Statm-Tiny","product":"Linux::Statm::Tiny","programFiles":["lib/Linux/Statm/Tiny/Mite.pm"],"repo":"https://github.com/robrwo/Linux-Statm-Tiny","vendor":"RRWO","versions":[{"lessThan":"0.0701","status":"affected","version":"0","versionType":"custom"}]}],"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Linux::Statm::Tiny for Perl before 0.0701 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238.\n\nIf an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution.\n\nLinux::Statm::Tiny uses Mite to produce the affected code section due to CVE-2025-30672"},{"lang":"es","value":"Linux::Statm::Tiny para Perl anterior a la versión 0.0701 permite cargar código no confiable del directorio de trabajo actual ('.') de forma similar a CVE-2016-1238. Si un atacante coloca un archivo malicioso en el directorio de trabajo actual, este podría cargarse en lugar del archivo deseado, lo que podría provocar la ejecución de código arbitrario. Linux::Statm::Tiny utiliza Mite para generar la sección de código afectada debido a CVE-2025-30672."}],"id":"CVE-2025-3051","lastModified":"2026-06-17T09:19:05.920","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-3051","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-04-01T18:29:49.888428Z","version":"2.0.3"}}]},"published":"2025-04-01T03:15:18.693","references":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","url":"https://blogs.perl.org/users/todd_rinaldo/2016/11/what-happened-to-dot-in-inc.html"},{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","url":"https://metacpan.org/release/RRWO/Linux-Statm-Tiny-0.0700/source/lib/Linux/Statm/Tiny/Mite.pm#L82"},{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","url":"https://metacpan.org/release/RRWO/Linux-Statm-Tiny-0.0701/changes"}],"sourceIdentifier":"9b29abf9-4ab0-4765-b253-1875cd9b441e","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-427"}],"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","type":"Secondary"}]}
|