HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-HTTP-TinyUpgrade perl-Pod-Perldoc | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl-HTTP-Tiny | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-SelfLoaderUpgrade perl-vmsishUpgrade perl-meta-notationUpgrade perl-ifUpgrade perl-varsUpgrade perl-blibUpgrade perl-Pod-HtmlUpgrade perl-File-DosGlob-debuginfoUpgrade perl-libUpgrade perl-Hash-Util-debuginfoUpgrade perl-Search-DictUpgrade perl-sortUpgrade perl-encoding-warningsUpgrade perl-Tie-FileUpgrade perl-docUpgrade perl-FindBinUpgrade perl-libs-debuginfoUpgrade perl-macrosUpgrade perl-utilsUpgrade perl-Module-LoadedUpgrade perl-Pod-FunctionsUpgrade perl-overloadUpgrade perl-IOUpgrade perl-TieUpgrade perl-Tie-MemoizeUpgrade perl-MemoizeUpgrade perl-sigtrapUpgrade perl-EnglishUpgrade perl-I18N-CollateUpgrade perl-Opcode-debuginfoUpgrade perl-AutoLoaderUpgrade perl-User-pwentUpgrade perl-File-statUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ThreadUpgrade perl-subsUpgrade perl-HTTP-Tiny-testsUpgrade perl-Text-AbbrevUpgrade perl-interpreter-debuginfoUpgrade perl-BenchmarkUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-DirHandleUpgrade perl-debuggerUpgrade perl-Attribute-HandlersUpgrade perl-ErrnoUpgrade perl-File-CopyUpgrade perl-FcntlUpgrade perl-File-FindUpgrade perl-Pod-PerldocUpgrade perl-Devel-SelfStubberUpgrade perl-Sys-HostnameUpgrade perl-fieldsUpgrade perl-AutoSplitUpgrade perl-debuginfoUpgrade perl-interpreterUpgrade perl-OpcodeUpgrade perl-openUpgrade perl-Devel-PeekUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-NEXTUpgrade perl-diagnosticsUpgrade perl-Time-Piece-debuginfoUpgrade perl-Hash-Util-FieldHashUpgrade perl-B-debuginfoUpgrade perlUpgrade perl-File-BasenameUpgrade perl-SelectSaverUpgrade perl-testsUpgrade perl-SymbolUpgrade perl-mroUpgrade perl-Fcntl-debuginfoUpgrade perl-ExtUtils-ConstantUpgrade perl-libsUpgrade perl-filetestUpgrade perl-ExtUtils-MiniperlUpgrade perl-Term-ReadLineUpgrade perl-TimeUpgrade perl-NDBM_FileUpgrade perl-localeUpgrade perl-Getopt-StdUpgrade perl-develUpgrade perl-phUpgrade perl-File-DosGlobUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Unicode-UCDUpgrade perl-POSIX-debuginfoUpgrade perl-POSIXUpgrade perl-Time-PieceUpgrade perl-ODBM_FileUpgrade perl-deprecateUpgrade perl-libnetcfgUpgrade perl-IO-debuginfoUpgrade perl-I18N-LangTagsUpgrade perl-FileCacheUpgrade perl-DynaLoaderUpgrade perl-Thread-SemaphoreUpgrade perl-HTTP-TinyUpgrade perl-Hash-UtilUpgrade perl-FileHandleUpgrade perl-Class-StructUpgrade perl-baseUpgrade perl-ODBM_File-debuginfoUpgrade perl-debugsourceUpgrade perl-DumpvalueUpgrade perl-Math-ComplexUpgrade perl-lessUpgrade perl-GDBM_File-debuginfoUpgrade perl-File-CompareUpgrade perl-mro-debuginfoUpgrade perl-Term-CompleteUpgrade perl-TestUpgrade perl-overloadingUpgrade perl-autouseUpgrade perl-Config-ExtensionsUpgrade perl-ExtUtils-EmbedUpgrade perl-DBM_FilterUpgrade perl-GDBM_FileUpgrade perl-BUpgrade perl-SafeUpgrade perl-IPC-Open3Upgrade perl-I18N-LanginfoUpgrade perl-NetUpgrade perl-NDBM_File-debuginfo | Feb 17, 2025 | Apr 18, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | Upgrade perlNo solution existsUpgrade libhttp-tiny-perl | May 15, 2025 | Apr 29, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Nov 18, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Aug 9, 2023 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 18, 2023 |
| Redhat_linux | — | Upgrade perl-HTTP-TinyNo solution exists | Nov 8, 2023 | Apr 29, 2023 |
| Suse | — | Upgrade perl-HTTP-Tiny | Aug 16, 2023 | Apr 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub