The Net::IPAddress::Util module before 5.000 for Perl does not properly consider extraneous zero characters in an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.
References
Configurations
No configuration.
History
27 Mar 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1287 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
21 Nov 2024, 06:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/ - | |
| References | () https://metacpan.org/release/Net-IPAddress-Util - | |
| References | () https://metacpan.org/release/PWBENNETT/Net-IPAddress-Util-5.000/changes - |
18 Mar 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-18 05:15
Updated : 2025-03-27 20:15
NVD link : CVE-2021-47156
Mitre link : CVE-2021-47156
CVE.ORG link : CVE-2021-47156
JSON object : View
Products Affected
No product.
CWE
CWE-1287
Improper Validation of Specified Type of Input