Description

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.

Remediation

References

CVE-2023-31486

Related Vulnerabilities

WordPress Plugin SoundPress Cross-Site Scripting (2.2.6)

WordPress Plugin Meta Box-WordPress Custom Fields Framework Arbitrary File Upload (4.16.1)

WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Multiple Vulnerabilities (2.2.4)

WordPress Plugin BeCustom Cross-Site Request Forgery (1.0.5.2)

WordPress Plugin Custom Dashboard & Login Page-AGCA Cross-Site Scripting (6.9.1)

Severity

High

Classification

CVE-2023-31486 CWE-295 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities