CVE-2023-31486

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-31486
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-31486.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-31486
Downstream
AZL (1)
BELL (1)
CLSA (14)
DEBIAN (1)
ECHO (1)
MGASA (1)
OESA (5)
openSUSE (3)
RHSA (6)
ROOT (1)
UBUNTU (1)
Related
ALSA (2)
openSUSE (3)
Published
2023-04-28T00:00:00Z
Modified
2026-10-22T10:33:45Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/31xxx/CVE-2023-31486.json"
}
References

Affected packages

Git / github.com/chansen/p5-http-tiny

Affected ranges

Type
GIT
Repo
https://github.com/chansen/p5-http-tiny
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d7705dc05a0f64dfeaeca46c8a49b19656f4f3d3
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "0.083"
                }
            ],
            "source": "DESCRIPTION"
        },
        {
            "cpe": "cpe:2.3:a:http\\:\\:tiny_project:http\\:\\:tiny:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "0.083"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

release-0.*
release-0.001
release-0.002
release-0.003
release-0.004
release-0.005
release-0.006
release-0.007
release-0.008
release-0.009
release-0.010
release-0.011
release-0.012
release-0.013
release-0.014
release-0.015
release-0.016
release-0.017
release-0.018
release-0.019
release-0.020
release-0.021
release-0.022
release-0.023
release-0.024
release-0.025
release-0.026
release-0.027
release-0.028
release-0.029
release-0.030
release-0.031
release-0.032
release-0.033
release-0.034
release-0.035
release-0.036
release-0.037
release-0.038
release-0.039
release-0.040
release-0.041
release-0.042
release-0.043
release-0.044
release-0.045
release-0.046
release-0.047
release-0.048
release-0.049
release-0.050
release-0.051
release-0.052
release-0.053
release-0.054
release-0.055
release-0.056
release-0.057
release-0.058
release-0.059
release-0.061
release-0.063
release-0.064
release-0.065
release-0.067
release-0.068
release-0.069
release-0.070
release-0.071
release-0.073
release-0.074
release-0.075
release-0.076
release-0.077
release-0.078
release-0.079
release-0.080
release-0.081
release-0.082

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-31486.json"