Vulnerability Details CVE-2022-36564
Incorrect access control in the install directory (C:\Strawberry) of StrawberryPerl v5.32.1.1 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.7%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2022-36564
-
cpe:2.3:a:strawberryperl:strawberryperl:-
-
cpe:2.3:a:strawberryperl:strawberryperl:5.32.1.1
-
cpe:2.3:o:microsoft:windows:-