HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-Pod-PerldocUpgrade perl-HTTP-Tiny | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl-HTTP-Tiny | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-Getopt-StdUpgrade perl-baseUpgrade perl-FileHandleUpgrade perl-HTTP-TinyUpgrade perl-develUpgrade perl-NDBM_FileUpgrade perl-ODBM_File-debuginfoUpgrade perl-libsUpgrade perl-overloadingUpgrade perl-testsUpgrade perl-localeUpgrade perl-phUpgrade perl-ODBM_FileUpgrade perl-I18N-LangTagsUpgrade perl-Config-ExtensionsUpgrade perl-debugsourceUpgrade perl-SelectSaverUpgrade perl-ExtUtils-MiniperlUpgrade perl-filetestUpgrade perl-SymbolUpgrade perl-Term-ReadLineUpgrade perl-IO-debuginfoUpgrade perl-POSIXUpgrade perl-POSIX-debuginfoUpgrade perl-DynaLoaderUpgrade perl-Time-PieceUpgrade perl-libnetcfgUpgrade perl-FileCacheUpgrade perl-Unicode-UCDUpgrade perl-Devel-Peek-debuginfoUpgrade perl-IPC-Open3Upgrade perl-NetUpgrade perl-ExtUtils-ConstantUpgrade perl-lessUpgrade perl-deprecateUpgrade perl-File-DosGlobUpgrade perl-GDBM_File-debuginfoUpgrade perl-Math-ComplexUpgrade perl-File-CompareUpgrade perl-BUpgrade perl-DumpvalueUpgrade perl-TestUpgrade perl-GDBM_FileUpgrade perl-Fcntl-debuginfoUpgrade perl-TimeUpgrade perl-autouseUpgrade perl-I18N-LanginfoUpgrade perl-Hash-UtilUpgrade perl-mroUpgrade perl-Thread-SemaphoreUpgrade perl-SafeUpgrade perl-ExtUtils-EmbedUpgrade perl-Class-StructUpgrade perl-mro-debuginfoUpgrade perl-Term-CompleteUpgrade perl-NDBM_File-debuginfoUpgrade perl-DBM_FilterUpgrade perl-docUpgrade perl-FindBinUpgrade perl-TieUpgrade perl-FcntlUpgrade perl-ErrnoUpgrade perl-Attribute-HandlersUpgrade perl-varsUpgrade perl-ThreadUpgrade perl-Text-AbbrevUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-HTTP-Tiny-testsUpgrade perl-MemoizeUpgrade perl-AutoSplitUpgrade perl-OpcodeUpgrade perl-NEXTUpgrade perl-interpreter-debuginfoUpgrade perl-interpreterUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-File-BasenameUpgrade perl-fieldsUpgrade perl-openUpgrade perl-File-CopyUpgrade perl-DirHandleUpgrade perl-diagnosticsUpgrade perl-Devel-PeekUpgrade perl-Sys-HostnameUpgrade perl-File-FindUpgrade perl-debuginfoUpgrade perl-File-statUpgrade perl-libs-debuginfoUpgrade perl-utilsUpgrade perl-macrosUpgrade perl-encoding-warningsUpgrade perl-debuggerUpgrade perl-BenchmarkUpgrade perl-overloadUpgrade perl-User-pwentUpgrade perl-EnglishUpgrade perl-Tie-MemoizeUpgrade perl-Module-LoadedUpgrade perl-Locale-Maketext-SimpleUpgrade perl-I18N-CollateUpgrade perl-AutoLoaderUpgrade perl-libUpgrade perl-IOUpgrade perl-Pod-HtmlUpgrade perl-Pod-FunctionsUpgrade perl-Opcode-debuginfoUpgrade perl-B-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-Devel-SelfStubberUpgrade perl-Hash-Util-FieldHashUpgrade perlUpgrade perl-Tie-FileUpgrade perl-blibUpgrade perl-vmsishUpgrade perl-File-DosGlob-debuginfoUpgrade perl-sortUpgrade perl-SelfLoaderUpgrade perl-Search-DictUpgrade perl-Pod-PerldocUpgrade perl-meta-notationUpgrade perl-ifUpgrade perl-sigtrapUpgrade perl-subsUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Hash-Util-debuginfo | Feb 17, 2025 | Apr 18, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | Upgrade perlUpgrade libhttp-tiny-perl | May 15, 2025 | Apr 29, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Nov 18, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Aug 9, 2023 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 18, 2023 |
| Redhat_linux | — | No solution existsUpgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Suse | — | Upgrade perl-HTTP-Tiny | Aug 16, 2023 | Apr 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub