CVE-2025-30672
Last modified
CVE-2025-30672 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Mite for Perl before 0.013000 generates code with the current working directory ('.') added to the @INC path similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution. This affects the Mite distribution itself, and other distributions that contain code generated by Mite.. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
Mite for Perl before 0.013000 generates code with the current working directory ('.') added to the @INC path similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution. This affects the Mite distribution itself, and other distributions that contain code generated by Mite.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-30672?
How severe is CVE-2025-30672?
How do I fix CVE-2025-30672?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-30667NULL pointer dereference in some Zoom Workplace Apps for Win…6.5
- CVE-2025-30668Integer underflow in some Zoom Workplace Apps may allow an a…6.5
- CVE-2025-30669Improper certificate validation in certain Zoom Clients may …6.5
- CVE-2025-3067Inappropriate implementation in Custom Tabs in Google Chrome…8.6
- CVE-2025-30670Null pointer dereference in some Zoom Workplace Apps for Win…6.5
- CVE-2025-30671Null pointer dereference in some Zoom Workplace Apps for Win…6.5
- CVE-2025-30673Sub::HandlesVia for Perl before 0.050002 allows untrusted co…6.5
- CVE-2025-30675In Apache CloudStack, a flaw in access control affects the l…4.7
- CVE-2025-30676Improper Neutralization of Script-Related HTML Tags in a Web…6.1
- CVE-2025-30677Apache Pulsar contains multiple connectors for integrating w…6.5
- CVE-2025-30678A Server-side Request Forgery (SSRF) vulnerability in Trend …7.5
- CVE-2025-30679A Server-side Request Forgery (SSRF) vulnerability in Trend …7.5
Are you affected by CVE-2025-30672?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST