CVE-2017-6512

Name of the Vulnerable Software and Affected Versions File-Path module versions prior to 2.13

Description The issue is related to a race condition in the rmtree and remove tree functions of the File-Path module for Perl. This condition arises due to errors in synchronization when using shared resources, specifically a time-of-check to time-of-use (TOCTOU) vulnerability. The exploitation of this issue could allow a remote attacker to compromise data integrity by setting the mode on arbitrary files through vectors involving directory-permission loosening logic.

Recommendations For versions prior to 2.13, update to version 2.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the rmtree and remove tree functions until a patch is applied.