HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-Pod-PerldocUpgrade perl-HTTP-Tiny | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl-HTTP-Tiny | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-overloadingUpgrade perl-ExtUtils-MiniperlUpgrade perl-SymbolUpgrade perl-Term-ReadLineUpgrade perl-testsUpgrade perl-localeUpgrade perl-Getopt-StdUpgrade perl-NDBM_FileUpgrade perl-deprecateUpgrade perl-DynaLoaderUpgrade perl-ODBM_FileUpgrade perl-Config-ExtensionsUpgrade perl-libnetcfgUpgrade perl-SelectSaverUpgrade perl-phUpgrade perl-filetestUpgrade perl-FileCacheUpgrade perl-BUpgrade perl-I18N-LangTagsUpgrade perl-develUpgrade perl-debugsourceUpgrade perl-mro-debuginfoUpgrade perl-IO-debuginfoUpgrade perl-DumpvalueUpgrade perl-lessUpgrade perl-mroUpgrade perl-File-CompareUpgrade perl-SafeUpgrade perl-Unicode-UCDUpgrade perl-Time-PieceUpgrade perl-Math-ComplexUpgrade perl-POSIX-debuginfoUpgrade perl-Term-CompleteUpgrade perl-Devel-Peek-debuginfoUpgrade perl-ExtUtils-ConstantUpgrade perl-POSIXUpgrade perl-NDBM_File-debuginfoUpgrade perl-File-DosGlobUpgrade perl-I18N-LanginfoUpgrade perl-Thread-SemaphoreUpgrade perl-IPC-Open3Upgrade perl-ODBM_File-debuginfoUpgrade perl-NetUpgrade perl-GDBM_File-debuginfoUpgrade perl-libsUpgrade perl-autouseUpgrade perl-HTTP-TinyUpgrade perl-Class-StructUpgrade perl-baseUpgrade perl-FileHandleUpgrade perl-GDBM_FileUpgrade perl-TimeUpgrade perl-DBM_FilterUpgrade perl-TestUpgrade perl-Hash-UtilUpgrade perl-Fcntl-debuginfoUpgrade perl-ExtUtils-EmbedUpgrade perl-subsUpgrade perl-Attribute-HandlersUpgrade perl-interpreter-debuginfoUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-IOUpgrade perl-Module-LoadedUpgrade perl-Pod-FunctionsUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-varsUpgrade perl-ThreadUpgrade perl-Text-AbbrevUpgrade perl-MemoizeUpgrade perl-sigtrapUpgrade perl-Tie-MemoizeUpgrade perl-Opcode-debuginfoUpgrade perl-Locale-Maketext-SimpleUpgrade perl-I18N-CollateUpgrade perl-EnglishUpgrade perl-AutoLoaderUpgrade perl-encoding-warningsUpgrade perl-docUpgrade perl-debuggerUpgrade perl-BenchmarkUpgrade perl-User-pwentUpgrade perl-TieUpgrade perl-HTTP-Tiny-testsUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-File-FindUpgrade perl-File-CopyUpgrade perl-File-BasenameUpgrade perl-fieldsUpgrade perl-DirHandleUpgrade perl-diagnosticsUpgrade perl-Devel-PeekUpgrade perl-debuginfoUpgrade perl-AutoSplitUpgrade perl-Sys-HostnameUpgrade perl-openUpgrade perl-OpcodeUpgrade perl-interpreterUpgrade perl-NEXTUpgrade perl-vmsishUpgrade perl-SelfLoaderUpgrade perl-ifUpgrade perl-utilsUpgrade perl-meta-notationUpgrade perl-sortUpgrade perl-macrosUpgrade perl-FindBinUpgrade perl-libs-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Pod-PerldocUpgrade perl-File-statUpgrade perl-Search-DictUpgrade perl-blibUpgrade perl-Tie-FileUpgrade perl-Hash-Util-FieldHashUpgrade perl-Devel-SelfStubberUpgrade perl-B-debuginfoUpgrade perlUpgrade perl-overloadUpgrade perl-FcntlUpgrade perl-ErrnoUpgrade perl-Pod-HtmlUpgrade perl-libUpgrade perl-Hash-Util-debuginfo | Feb 17, 2025 | Apr 18, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | No solution existsUpgrade perlUpgrade libhttp-tiny-perl | May 15, 2025 | Apr 29, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Nov 18, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Aug 9, 2023 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 18, 2023 |
| Redhat_linux | — | Upgrade perl-HTTP-TinyNo solution exists | Nov 8, 2023 | Apr 29, 2023 |
| Suse | — | Upgrade perl-HTTP-Tiny | Aug 16, 2023 | Apr 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub