CyberRota Analysis
AI-GeneratedThe XML::Bare module for Perl versions up to 0.53 is vulnerable to an infinite loop when parsing malformed attributes, such as nameless attributes or unbalanced quotes. This vulnerability can lead to denial of service by causing applications to hang indefinitely. Developers and system administrators using this module should prioritize patching or upgrading to mitigate potential disruptions in their applications.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever. Nameless attributes such as "<a ='c'>" or unbalanced quotes "<a b='''''''c'>" can trigger this condition.