HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-HTTP-TinyUpgrade perl-Pod-Perldoc | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl-HTTP-Tiny | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-Fcntl-debuginfoUpgrade perl-GDBM_FileUpgrade perl-ExtUtils-EmbedUpgrade perl-TestUpgrade perl-TimeUpgrade perl-overloadingUpgrade perl-baseUpgrade perl-Class-StructUpgrade perl-DBM_FilterUpgrade perl-FileHandleUpgrade perl-autouseUpgrade perl-Thread-SemaphoreUpgrade perl-debugsourceUpgrade perl-filetestUpgrade perl-Term-ReadLineUpgrade perl-Config-ExtensionsUpgrade perl-SymbolUpgrade perl-ODBM_File-debuginfoUpgrade perl-ExtUtils-MiniperlUpgrade perl-SelectSaverUpgrade perl-HTTP-TinyUpgrade perl-Devel-Peek-debuginfoUpgrade perl-libsUpgrade perl-Hash-UtilUpgrade perl-testsUpgrade perl-GDBM_File-debuginfoUpgrade perl-File-DosGlobUpgrade perl-Unicode-UCDUpgrade perl-ODBM_FileUpgrade perl-deprecateUpgrade perl-DynaLoaderUpgrade perl-FileCacheUpgrade perl-SafeUpgrade perl-I18N-LangTagsUpgrade perl-Math-ComplexUpgrade perl-I18N-LanginfoUpgrade perl-IPC-Open3Upgrade perl-IO-debuginfoUpgrade perl-lessUpgrade perl-DumpvalueUpgrade perl-File-CompareUpgrade perl-Time-PieceUpgrade perl-ExtUtils-ConstantUpgrade perl-BUpgrade perl-NetUpgrade perl-POSIX-debuginfoUpgrade perl-NDBM_File-debuginfoUpgrade perl-Term-CompleteUpgrade perl-mro-debuginfoUpgrade perl-mroUpgrade perl-POSIXUpgrade perl-NDBM_FileUpgrade perl-libnetcfgUpgrade perl-phUpgrade perl-develUpgrade perl-Getopt-StdUpgrade perl-localeUpgrade perl-Hash-Util-debuginfoUpgrade perl-FindBinUpgrade perl-MemoizeUpgrade perl-interpreterUpgrade perl-EnglishUpgrade perl-AutoLoaderUpgrade perl-Tie-MemoizeUpgrade perl-Opcode-debuginfoUpgrade perl-Locale-Maketext-SimpleUpgrade perl-overloadUpgrade perl-docUpgrade perl-BenchmarkUpgrade perl-User-pwentUpgrade perl-debuggerUpgrade perl-libs-debuginfoUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-File-statUpgrade perl-utilsUpgrade perl-macrosUpgrade perl-HTTP-Tiny-testsUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-subsUpgrade perl-sigtrapUpgrade perl-FcntlUpgrade perl-ErrnoUpgrade perl-Attribute-HandlersUpgrade perl-varsUpgrade perl-ThreadUpgrade perl-Text-AbbrevUpgrade perl-encoding-warningsUpgrade perl-meta-notationUpgrade perl-blibUpgrade perl-ifUpgrade perl-File-DosGlob-debuginfoUpgrade perl-vmsishUpgrade perl-Tie-FileUpgrade perl-sortUpgrade perl-SelfLoaderUpgrade perl-Search-DictUpgrade perl-Pod-FunctionsUpgrade perl-Module-LoadedUpgrade perl-IOUpgrade perl-libUpgrade perl-Hash-Util-FieldHashUpgrade perl-Pod-HtmlUpgrade perl-B-debuginfoUpgrade perl-Devel-SelfStubberUpgrade perl-Time-Piece-debuginfoUpgrade perlUpgrade perl-Pod-PerldocUpgrade perl-TieUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-Sys-HostnameUpgrade perl-openUpgrade perl-fieldsUpgrade perl-I18N-CollateUpgrade perl-File-CopyUpgrade perl-DirHandleUpgrade perl-Devel-PeekUpgrade perl-File-BasenameUpgrade perl-AutoSplitUpgrade perl-OpcodeUpgrade perl-interpreter-debuginfoUpgrade perl-File-FindUpgrade perl-diagnosticsUpgrade perl-debuginfoUpgrade perl-NEXT | Feb 17, 2025 | Apr 18, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | No solution existsUpgrade perlUpgrade libhttp-tiny-perl | May 15, 2025 | Apr 29, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Nov 18, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Aug 9, 2023 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 18, 2023 |
| Redhat_linux | — | No solution existsUpgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Suse | — | Upgrade perl-HTTP-Tiny | Aug 16, 2023 | Apr 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub