Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

LWP-Protocol-https

cpan

Provide https support for LWP::UserAgent

View on github.com · View on metacpan.org

Moderate Security Advisories for LWP-Protocol-https in cpan Clear Filters

Moderate
over 6 years ago

The libwww-perl LWP::Protocol::https module 6.04 through 6.06 for Perl, when using IO::Socket::SSL as the SSL socket class, allows attackers to disable server certificate validation via the (1) HTTPS_CA_DIR or (2) HTTPS_CA_FILE environment variable. CPANSA-LWP-Protocol-https-2014-3230

cpan LWP-Protocol-https

Filter by Severity

Moderate 1