File Access Vulnerability in Perl DBI Module

CVE-2014-10401

What is CVE-2014-10401?

An issue has been identified in the DBI module of Perl prior to version 1.632, where DBD::File drivers have the capability to access files outside the intended directory specified by the f_dir attribute. This flaw could potentially lead to unauthorized file access, as it allows files to be opened from directories not explicitly provided to the driver, increasing the surface area for malicious exploitation.

References