CVE-2015-8607

HIGH · CVSS 7.3 EPSS 3.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-01-13 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2015-8607

Severity

HIGH

CVSS

7.3

EPSS

3.12%

Original Filing — NVD Description

The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.