CVE-2015-3406

Published
View on NVD ↗
CVSS v3
7.5
HIGH
CVSS v2
6.4
MEDIUM
Affected
1
PROJECT

Description

The PGP signature parsing in Module::Signature before 0.74 allows remote attackers to cause the unsigned portion of a SIGNATURE file to be treated as the signed portion via unspecified vectors.

Module signature file manipulation
GitHubGitHub
16