https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:03:16.529971+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-15392 CVE-2026-15392 — DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location 2026-10-06T12:03:16.546453+00:00

Affected: HMBRAND DBD::File

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.

The complete_table_name method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any path outside of the configured f_dir and f_dir_search directories.

Callers of file-based drivers can read or write files outside of the data directory.