CVE-2025-30673
Severity CVSS v4.0:
Pending analysis
Type:
CWE-427
Uncontrolled Search Path Element
Publication date:
01/04/2025
Last modified:
01/04/2025
Description
Sub::HandlesVia for Perl before 0.050002 allows untrusted code from the current working directory (&#39;.&#39;) to be loaded similar to CVE-2016-1238.<br />
<br />
If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution.<br />
<br />
Sub::HandlesVia uses Mite to produce the affected code section due to CVE-2025-30672
Impact
Base Score 3.x
6.50
Severity 3.x
MEDIUM