CPANSA-Module-Load-2011-10043: Module-Load vulnerability
| Publisher | giterlizzi | Document category | csaf_security_advisory |
|---|---|---|---|
| Initial release date | 2026-07-07T00:00:00 | Engine | CSAF Perl Toolkit 0.26 |
| Current release date | 2026-07-07T00:00:00 | Build Date | |
| Current version | 1 | Status | final |
| CVSS v3.1 Base Score | 9.8 | Severity | |
| Original language | Language | en | |
| Also referred to | |||
Vulnerability Description
Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary code.
Vulnerabilities
CVE-2011-10043
Vulnerability DescriptionModule::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded.
Module names starting with "::" could be passed to the load function to specify arbitrary module paths.
Attackers able to influence module names passed to load could use that bug to execute arbitrary code.
| Weakness | CWE-145 : Improper Neutralization of Section Delimiters |
|---|
Product status
Known affected
| Product | Score | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Module-Load less than 0.22 |
|
Fixed
- Module-Load greater than or equal 0.22
giterlizzi
Namespace: https://github.com/giterlizzi/
gdt@cpan.org
References
- CPANSA-Module-Load-2011-10043 JSON self
https://raw.githubusercontent.com/giterlizzi/perl-CPANSA-CSAF/develop/csaf/white/2026/cpansa-module-load-2011-10043.json - https://blogs.perl.org/users/michael_g_schwern/2011/10/how-not-to-load-a-module-or-bad-interfaces-make-good-people-do-bad-things.html external
https://blogs.perl.org/users/michael_g_schwern/2011/10/how-not-to-load-a-module-or-bad-interfaces-make-good-people-do-bad-things.html - https://metacpan.org/release/BINGOS/Module-Load-0.22/changes external
https://metacpan.org/release/BINGOS/Module-Load-0.22/changes - https://metacpan.org/release/BINGOS/Module-Load-0.22/diff/BINGOS/Module-Load-0.20/lib/Module/Load.pm external
https://metacpan.org/release/BINGOS/Module-Load-0.22/diff/BINGOS/Module-Load-0.20/lib/Module/Load.pm - CVE-2011-10043 (NVD) external
https://nvd.nist.gov/vuln/detail/CVE-2011-10043
Revision history
| Version | Date of the revision | Summary of the revision |
|---|---|---|
| 1 | Tue Jul 7 00:00:00 2026 | First release |
Sharing rules
TLP:WHITE
For the TLP version see: https://www.first.org/tlp/