Vulnerability Details CVE-2013-1437
Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.3%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114904.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114912.html
- https://metacpan.org/changes/distribution/Module-Metadata
- http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114904.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114912.html
- https://metacpan.org/changes/distribution/Module-Metadata
Products affected by CVE-2013-1437
-
cpe:2.3:a:module-metadata_project:module-metadata:*
-
cpe:2.3:o:fedoraproject:fedora:18
-
cpe:2.3:o:fedoraproject:fedora:19