CVE-2026-46720: CVE-2026-46720: güvenlik açığı

Açıklama (NVD)

Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics.

Özet bilgiler

CVSS v3.1

8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

EPSS

%0,34 (yüzdelik 28)

CWE

CWE-93

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• metacpan.org
• www.cve.org
• CWE-93