Description (CNA)
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TINITA / YAML::LibYAML | affected 0 before 0.903.0 |
CWE
CWE-552
References
- https://github.com/ingydotnet/yaml-libyaml-pm/issues/120
- https://github.com/ingydotnet/yaml-libyaml-pm/pull/121
- https://github.com/ingydotnet/yaml-libyaml-pm/pull/122
ADP enrichment
No English description supplied.
No references supplied.