Crypt::DSA Two-Argument Open Vulnerability in Perl Allowing File Modification

A vulnerability exists in Crypt::DSA versions through 1.19 for Perl, where the module uses two-argument open calls. This practice allows existing files to be modified, creating a potential risk for unintended file alterations.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications of files, potentially causing data loss or corruption.

Remediation

Users can upgrade to Crypt::DSA version 1.20, which addresses this vulnerability by replacing the two-argument open calls with safer alternatives. Instructions for downloading the updated version are available on MetaCPAN.