PT-2026-56182 · Undefined · Undefined

Publicado 2026-07-07 · Atualizado 2026-07-07 · CVE-2011-10043

NVD

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded.

Module names starting with "::" could be passed to the load function to specify arbitrary module paths.

Attackers able to influence module names passed to load could use that bug to execute arbitrary code.

Correção

Enumeração de Fraquezas

CWE-145

Identificadores relacionados

CVE-2011-10043

Produtos afetados

Undefined

Referências · 4

• https://metacpan.org/release/BINGOS/Module-Load-0.22/changes · Nota
• https://metacpan.org/release/BINGOS/Module-Load-0.22/diff/BINGOS/Module-Load-0.20/lib/Module/Load.pm · Nota
• https://blogs.perl.org/users/michael_g_schwern/2011/10/how-not-to-load-a-module-or-bad-interfaces-make-good-people-do-bad-things.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-10043 · Nota de Segurança