Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed t...
CPANSA-Module-Load-2011-10043
CVE-2011-10043
Description:
Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary code.
Affected Packages
| Ecosystem | Package | Vulnerable Versions | Patched Version |
|---|---|---|---|
| cpan |
Module-Load
|
< 0.22 |
0.22
|
Actions
Advisory Details
| Published: | July 07, 2026 25 days ago |
| Updated: | July 17, 2026 14 days ago |
| Source: | Cpansa |
| UUID: | CPANSA-Module-Load-2011-10043 |