HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-Pod-PerldocUpgrade perl-HTTP-Tiny | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl-HTTP-Tiny | Jul 4, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-ifUpgrade perl-Pod-PerldocUpgrade perl-fieldsUpgrade perl-AutoSplitUpgrade perl-Sys-HostnameUpgrade perl-OpcodeUpgrade perl-DirHandleUpgrade perl-B-debuginfoUpgrade perl-File-FindUpgrade perl-File-CopyUpgrade perl-File-BasenameUpgrade perl-meta-notationUpgrade perl-SelfLoaderUpgrade perl-Search-DictUpgrade perl-interpreterUpgrade perl-NEXTUpgrade perl-ErrnoUpgrade perl-vmsishUpgrade perl-File-statUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-utilsUpgrade perl-Text-AbbrevUpgrade perl-ThreadUpgrade perl-varsUpgrade perl-diagnosticsUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-macrosUpgrade perl-debuginfoUpgrade perl-Attribute-HandlersUpgrade perl-EnglishUpgrade perl-FcntlUpgrade perl-blibUpgrade perl-Locale-Maketext-SimpleUpgrade perl-I18N-CollateUpgrade perl-Tie-FileUpgrade perl-Devel-SelfStubberUpgrade perl-File-DosGlob-debuginfoUpgrade perl-libs-debuginfoUpgrade perl-Hash-Util-debuginfoUpgrade perl-subsUpgrade perl-openUpgrade perl-Opcode-debuginfoUpgrade perl-MemoizeUpgrade perl-Module-LoadedUpgrade perl-IOUpgrade perl-Pod-HtmlUpgrade perl-AutoLoaderUpgrade perl-FindBinUpgrade perl-libUpgrade perl-Pod-FunctionsUpgrade perl-docUpgrade perl-encoding-warningsUpgrade perl-HTTP-Tiny-testsUpgrade perl-Time-Piece-debuginfoUpgrade perl-Tie-MemoizeUpgrade perl-sortUpgrade perl-Devel-PeekUpgrade perl-interpreter-debuginfoUpgrade perl-TieUpgrade perl-User-pwentUpgrade perl-overloadUpgrade perl-BenchmarkUpgrade perl-debuggerUpgrade perl-sigtrapUpgrade perl-Hash-Util-FieldHashUpgrade perlUpgrade perl-FileCacheUpgrade perl-DumpvalueUpgrade perl-TimeUpgrade perl-NDBM_FileUpgrade perl-localeUpgrade perl-DynaLoaderUpgrade perl-deprecateUpgrade perl-ODBM_FileUpgrade perl-IO-debuginfoUpgrade perl-I18N-LangTagsUpgrade perl-baseUpgrade perl-HTTP-TinyUpgrade perl-FileHandleUpgrade perl-libnetcfgUpgrade perl-Math-ComplexUpgrade perl-lessUpgrade perl-GDBM_File-debuginfoUpgrade perl-File-CompareUpgrade perl-SafeUpgrade perl-NDBM_File-debuginfoUpgrade perl-Time-PieceUpgrade perl-NetUpgrade perl-mro-debuginfoUpgrade perl-IPC-Open3Upgrade perl-ExtUtils-ConstantUpgrade perl-BUpgrade perl-I18N-LanginfoUpgrade perl-mroUpgrade perl-Term-CompleteUpgrade perl-autouseUpgrade perl-TestUpgrade perl-GDBM_FileUpgrade perl-Fcntl-debuginfoUpgrade perl-ExtUtils-EmbedUpgrade perl-DBM_FilterUpgrade perl-POSIX-debuginfoUpgrade perl-POSIXUpgrade perl-File-DosGlobUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Unicode-UCDUpgrade perl-Class-StructUpgrade perl-Hash-UtilUpgrade perl-overloadingUpgrade perl-ODBM_File-debuginfoUpgrade perl-libsUpgrade perl-filetestUpgrade perl-ExtUtils-MiniperlUpgrade perl-debugsourceUpgrade perl-Config-ExtensionsUpgrade perl-testsUpgrade perl-SelectSaverUpgrade perl-SymbolUpgrade perl-Term-ReadLineUpgrade perl-Thread-SemaphoreUpgrade perl-Getopt-StdUpgrade perl-develUpgrade perl-ph | Feb 17, 2025 | Apr 18, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | Upgrade perlNo solution existsUpgrade libhttp-tiny-perl | May 15, 2025 | Apr 29, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Nov 18, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp10 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | — | Aug 9, 2023 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-HTTP-Tiny | Nov 16, 2023 | Apr 18, 2023 |
| Redhat_linux | — | No solution existsUpgrade perl-HTTP-Tiny | Nov 8, 2023 | Apr 29, 2023 |
| Suse | — | Upgrade perl-HTTP-Tiny | Aug 16, 2023 | Apr 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub