HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-Pod-PerldocUpgrade perl-HTTP-Tiny | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl-HTTP-Tiny | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-I18N-Langinfo-debuginfoUpgrade perl-overloadUpgrade perl-openUpgrade perl-B-debuginfoUpgrade perl-Devel-SelfStubberUpgrade perl-debuginfoUpgrade perl-DirHandleUpgrade perl-AutoSplitUpgrade perl-File-BasenameUpgrade perl-File-CopyUpgrade perl-File-FindUpgrade perl-interpreter-debuginfoUpgrade perl-Devel-PeekUpgrade perl-Hash-Util-FieldHashUpgrade perl-Locale-Maketext-SimpleUpgrade perl-encoding-warningsUpgrade perl-EnglishUpgrade perl-ifUpgrade perl-Search-DictUpgrade perl-SelfLoaderUpgrade perl-sortUpgrade perl-I18N-CollateUpgrade perl-vmsishUpgrade perl-Tie-MemoizeUpgrade perl-meta-notationUpgrade perl-AutoLoaderUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Tie-FileUpgrade perl-TieUpgrade perl-BenchmarkUpgrade perlUpgrade perl-debuggerUpgrade perl-Opcode-debuginfoUpgrade perl-docUpgrade perl-fieldsUpgrade perl-blibUpgrade perl-Pod-PerldocUpgrade perl-Sys-HostnameUpgrade perl-Hash-Util-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-NEXTUpgrade perl-ErrnoUpgrade perl-FcntlUpgrade perl-HTTP-Tiny-testsUpgrade perl-sigtrapUpgrade perl-ThreadUpgrade perl-OpcodeUpgrade perl-varsUpgrade perl-diagnosticsUpgrade perl-Attribute-HandlersUpgrade perl-subsUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-FindBinUpgrade perl-libs-debuginfoUpgrade perl-File-statUpgrade perl-macrosUpgrade perl-interpreterUpgrade perl-Text-AbbrevUpgrade perl-utilsUpgrade perl-IOUpgrade perl-libUpgrade perl-Pod-HtmlUpgrade perl-MemoizeUpgrade perl-User-pwentUpgrade perl-Pod-FunctionsUpgrade perl-Module-LoadedUpgrade perl-Time-PieceUpgrade perl-File-DosGlobUpgrade perl-HTTP-TinyUpgrade perl-Hash-UtilUpgrade perl-FileHandleUpgrade perl-Class-StructUpgrade perl-baseUpgrade perl-Thread-SemaphoreUpgrade perl-POSIXUpgrade perl-Unicode-UCDUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Getopt-StdUpgrade perl-NDBM_FileUpgrade perl-localeUpgrade perl-develUpgrade perl-phUpgrade perl-Math-ComplexUpgrade perl-lessUpgrade perl-GDBM_File-debuginfoUpgrade perl-DumpvalueUpgrade perl-File-CompareUpgrade perl-debugsourceUpgrade perl-ODBM_File-debuginfoUpgrade perl-overloadingUpgrade perl-libsUpgrade perl-filetestUpgrade perl-ExtUtils-MiniperlUpgrade perl-Config-ExtensionsUpgrade perl-testsUpgrade perl-Term-ReadLineUpgrade perl-SymbolUpgrade perl-SelectSaverUpgrade perl-BUpgrade perl-NDBM_File-debuginfoUpgrade perl-NetUpgrade perl-SafeUpgrade perl-mroUpgrade perl-Term-CompleteUpgrade perl-mro-debuginfoUpgrade perl-IPC-Open3Upgrade perl-ExtUtils-ConstantUpgrade perl-IO-debuginfoUpgrade perl-I18N-LanginfoUpgrade perl-GDBM_FileUpgrade perl-Fcntl-debuginfoUpgrade perl-ExtUtils-EmbedUpgrade perl-DBM_FilterUpgrade perl-TimeUpgrade perl-TestUpgrade perl-autouseUpgrade perl-I18N-LangTagsUpgrade perl-libnetcfgUpgrade perl-FileCacheUpgrade perl-DynaLoaderUpgrade perl-deprecateUpgrade perl-ODBM_FileUpgrade perl-POSIX-debuginfo | Feb 17, 2025 | Apr 18, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | Upgrade perlUpgrade libhttp-tiny-perl | May 15, 2025 | Apr 29, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Nov 18, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Aug 9, 2023 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 18, 2023 |
| Redhat_linux | — | No solution existsUpgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Suse | — | Upgrade perl-HTTP-Tiny | Aug 16, 2023 | Apr 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub