HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-HTTP-TinyUpgrade perl-Pod-Perldoc | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl-HTTP-Tiny | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-DBM_FilterUpgrade perl-Fcntl-debuginfoUpgrade perl-TimeUpgrade perl-BUpgrade perl-I18N-LanginfoUpgrade perl-mro-debuginfoUpgrade perl-IPC-Open3Upgrade perl-TestUpgrade perl-GDBM_FileUpgrade perl-mroUpgrade perl-Term-CompleteUpgrade perl-Devel-Peek-debuginfoUpgrade perl-ODBM_File-debuginfoUpgrade perl-Getopt-StdUpgrade perl-overloadingUpgrade perl-autouseUpgrade perl-filetestUpgrade perl-libsUpgrade perl-SymbolUpgrade perl-NDBM_File-debuginfoUpgrade perl-SafeUpgrade perl-ExtUtils-EmbedUpgrade perl-debugsourceUpgrade perl-ExtUtils-MiniperlUpgrade perl-testsUpgrade perl-Config-ExtensionsUpgrade perl-SelectSaverUpgrade perl-Term-ReadLineUpgrade perl-localeUpgrade perl-NetUpgrade perl-phUpgrade perl-NDBM_FileUpgrade perl-Time-PieceUpgrade perl-Unicode-UCDUpgrade perl-develUpgrade perl-File-DosGlobUpgrade perl-lessUpgrade perl-POSIXUpgrade perl-Math-ComplexUpgrade perl-POSIX-debuginfoUpgrade perl-ExtUtils-ConstantUpgrade perl-HTTP-TinyUpgrade perl-FileHandleUpgrade perl-DynaLoaderUpgrade perl-deprecateUpgrade perl-GDBM_File-debuginfoUpgrade perl-FileCacheUpgrade perl-File-CompareUpgrade perl-Thread-SemaphoreUpgrade perl-baseUpgrade perl-IO-debuginfoUpgrade perl-DumpvalueUpgrade perl-ODBM_FileUpgrade perl-Hash-UtilUpgrade perl-I18N-LangTagsUpgrade perl-Class-StructUpgrade perl-libnetcfgUpgrade perl-Opcode-debuginfoUpgrade perl-Locale-Maketext-SimpleUpgrade perl-I18N-CollateUpgrade perl-AutoLoaderUpgrade perl-B-debuginfoUpgrade perlUpgrade perl-EnglishUpgrade perl-Hash-Util-FieldHashUpgrade perl-Devel-SelfStubberUpgrade perl-Time-Piece-debuginfoUpgrade perl-Tie-MemoizeUpgrade perl-File-statUpgrade perl-utilsUpgrade perl-macrosUpgrade perl-libs-debuginfoUpgrade perl-FindBinUpgrade perl-openUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-AutoSplitUpgrade perl-IOUpgrade perl-Pod-HtmlUpgrade perl-MemoizeUpgrade perl-libUpgrade perl-NEXTUpgrade perl-diagnosticsUpgrade perl-fieldsUpgrade perl-BenchmarkUpgrade perl-Pod-FunctionsUpgrade perl-Module-LoadedUpgrade perl-vmsishUpgrade perl-Tie-FileUpgrade perl-sortUpgrade perl-SelfLoaderUpgrade perl-Search-DictUpgrade perl-Pod-PerldocUpgrade perl-meta-notationUpgrade perl-ifUpgrade perl-File-DosGlob-debuginfoUpgrade perl-blibUpgrade perl-File-CopyUpgrade perl-interpreter-debuginfoUpgrade perl-File-BasenameUpgrade perl-DirHandleUpgrade perl-Devel-PeekUpgrade perl-debuginfoUpgrade perl-Sys-HostnameUpgrade perl-interpreterUpgrade perl-File-FindUpgrade perl-OpcodeUpgrade perl-User-pwentUpgrade perl-TieUpgrade perl-overloadUpgrade perl-docUpgrade perl-debuggerUpgrade perl-encoding-warningsUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-FcntlUpgrade perl-subsUpgrade perl-sigtrapUpgrade perl-HTTP-Tiny-testsUpgrade perl-Hash-Util-debuginfoUpgrade perl-varsUpgrade perl-ThreadUpgrade perl-Text-AbbrevUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-ErrnoUpgrade perl-Attribute-Handlers | Feb 17, 2025 | Apr 18, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | Upgrade perlUpgrade libhttp-tiny-perl | May 15, 2025 | Apr 29, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Nov 18, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Aug 9, 2023 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 18, 2023 |
| Redhat_linux | — | No solution existsUpgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Suse | — | Upgrade perl-HTTP-Tiny | Aug 16, 2023 | Apr 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub