cve/2020/CVE-2020-16156.md

CVE-2020-16156

Description

CPAN 2.28 allows Signature Verification Bypass.

POC

Reference

• https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
• https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/

Github

• https://github.com/1g-v/DevSec_Docker_lab
• https://github.com/ARPSyndicate/cvemon
• https://github.com/L-ivan7/-.-DevSec_Docker
• https://github.com/PajakAlexandre/wik-dps-tp02
• https://github.com/adegoodyer/kubernetes-admin-toolkit
• https://github.com/adegoodyer/ubuntu
• https://github.com/cdupuis/image-api
• https://github.com/flexiondotorg/CNCF-02
• https://github.com/fokypoky/places-list
• https://github.com/nedenwalker/spring-boot-app-using-gradle
• https://github.com/nedenwalker/spring-boot-app-with-log4j-vuln
• https://github.com/raylivesun/pldo
• https://github.com/raylivesun/ploa
• https://github.com/vulnersCom/vulners-sbom-parser