| Package | Affected versions | Patched versions |
|---|---|---|
| perl | ≥ 5.23.0, < 5.24.1≥ 5.25.0, < 5.25.3 | 5.24.15.25.3 |
The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free