The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.
CVSS 2.0
Severity: LOW
Problem Type: CWE-59,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| cspan | capture-tiny | 0.21 |
| cspan | capture-tiny | 0.22 |
| cspan | capture-tiny | 0.20 |
| cspan | capture-tiny | * |