CVE-2014-1875: Cspan Capture-Tiny

Low severity, CVSS 3.6. EPSS: 0.5% chance of exploitation in the next 30 days.

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

Affected products

• Cspan Capture-Tiny: up to and including 0.23; version 0.20 only; version 0.21 only; version 0.22 only

Published 2014-10-06. Last modified 2026-06-17.