8.1
CVSS
CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
Severity: HIGH
📦
cpanpm
Vendor: cpanpm_project
Actively Exploited
0
CISA KEV List
PoC / Exploits
0
Code Available
Total RCEs
0
Remote Access
Total CVEs
1
Total Indexed
Avg. EPSS
1.55%
Exploit Prob.