Description
The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses.
Scores
CVSS v3
7.5
EPSS
0.0026
EPSS Percentile
49.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-704
Status
published
Products (2)
data\/\
< 0.29
netapp/snapcenter
Published
Mar 31, 2021
Tracked Since
Feb 18, 2026