Approved changes feed: RSS · Atom
cpe:2.3:a:tobyink:sub::handlesvia:*:*:*:*:*:*:*:*part: a version: * update: handlesvia
| Vendor | Tobyink (7ad9d4b3-6760-597c-8c1c-4cbe590deeb9) |
|---|---|
| Product | Sub (541c5077-9844-541e-b7e3-a114d9c1fd03) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-30673 |
vulnerable | 2026-06-08 07:17:01.477901 |
Sub::HandlesVia for Perl allows untrusted code to be included from the current working directory
Sub::HandlesVia for Perl before 0.050002 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238.
If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution.
Sub::HandlesVia uses Mite to produce the affected code section due to CVE-2025-30672
Published: 2025-04-01T02:02:25.594Z
Updated: 2025-04-01T18:29:17.462Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.