Description

Linux::Statm::Tiny for Perl before 0.0701 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution. Linux::Statm::Tiny uses Mite to produce the affected code section due to CVE-2025-30672

INFO

Published Date :

2025-04-01T02:20:40.971Z

Last Modified :

2025-04-01T18:30:09.318Z

Source :

CPANSec
AFFECTED PRODUCTS

The following products are affected by CVE-2025-3051 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-3051.

URL Resource
https://blogs.perl.org/users/todd_rinaldo/2016/11/what-happened-to-dot-in-inc.html cve-icon cve-icon
https://metacpan.org/release/RRWO/Linux-Statm-Tiny-0.0700/source/lib/Linux/Statm/Tiny/Mite.pm#L82 cve-icon cve-icon
https://metacpan.org/release/RRWO/Linux-Statm-Tiny-0.0701/changes cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact