CVE-2013-1437

CRITICAL 9.8CVE-2013-1437 · Published 28/01/2020 · updated 16/06/2026

In short

CVE-2013-1437 is a CRITICAL (CVSS 9.8) vulnerability affecting module-metadata (module-metadata project).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.2% of all vulnerabilities.
Fix: update to 1.000015 or later.

Package	Affected versions	Patched versions
module-metadata module-metadata_project	`< 1.000015`	`1.000015`

Description

Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value.

References

lists.fedoraproject.org/pipermail/package-announce/2013-August/114904.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2013-August/114912.html · Third Party Advisory
metacpan.org/changes/distribution/Module-Metadata · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free