CVE-2020-16155

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2021-12-13

Last modified

2024-08-04

Affected products

• \ (Cpan\)

References

• https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
• https://metacpan.org/pod/CPAN::Checksums