CyberRota Analysis
AI-GeneratedVersions of Module::Load prior to 0.22 for Perl are vulnerable to arbitrary code execution due to improper handling of module names, allowing attackers to load modules from outside the designated @INC paths. This critical vulnerability poses a significant risk to any applications relying on these versions, particularly those where user input can influence module loading. Organizations using affected versions should prioritize immediate updates to mitigate potential exploitation.
Original NVD Description
Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded. Module names starting with "::" could be passed to the load function to specify arbitrary module paths. Attackers able to influence module names passed to load could use that bug to execute arbitrary code.