Skip to content
OpenAdvisories

Package · Debian

libconfig-inifiles-perl

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.6

    Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle

    Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle. Config::IniFiles::_make_filehandle opens a filename argument with Perl's 2-arg open(), so a filename…