CyberRota Analysis
AI-GeneratedHTML::Bare versions up to 0.04 for Perl are vulnerable to an infinite loop when parsing malformed attributes, such as nameless attributes or unbalanced quotes. This flaw can lead to denial of service by causing the parser to hang indefinitely. Developers and organizations using this library should prioritize updating to the latest version available in the git repository to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
HTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed attributes. The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever. Nameless attributes such as "<a ='c'>" or unbalanced quotes "<a b='''''''c'>" can trigger this condition. Note that the latest version available on CPAN is version 0.02. Newer versions are available on the git repository.