cve/2020/CVE-2020-16156.md

### [CVE-2020-16156](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16156)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

CPAN 2.28 allows Signature Verification Bypass.

### POC

#### Reference
- https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
- https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/

#### Github
- https://github.com/1g-v/DevSec_Docker_lab
- https://github.com/ARPSyndicate/cvemon
- https://github.com/L-ivan7/-.-DevSec_Docker
- https://github.com/PajakAlexandre/wik-dps-tp02
- https://github.com/adegoodyer/kubernetes-admin-toolkit
- https://github.com/adegoodyer/ubuntu
- https://github.com/cdupuis/image-api
- https://github.com/flexiondotorg/CNCF-02
- https://github.com/fokypoky/places-list
- https://github.com/nedenwalker/spring-boot-app-using-gradle
- https://github.com/nedenwalker/spring-boot-app-with-log4j-vuln
- https://github.com/raylivesun/pldo
- https://github.com/raylivesun/ploa
- https://github.com/vulnersCom/vulners-sbom-parser