The Crypt::DSA module for Perl, up to version 1.19, uses a 2-argument open function call that permits modification of existing files. This improper file handling corresponds to CWE-552, where files or directories are accessible to external parties. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with network attack vector, low complexity, no privileges or user interaction required, and impacts confidentiality and integrity. No patch or official remediation level has been disclosed, and no known exploits have been reported.

An attacker can remotely modify existing files due to the insecure file open method in Crypt::DSA, potentially leading to unauthorized changes in file contents. The impact affects confidentiality and integrity but does not affect availability. This could allow data tampering or information disclosure depending on the context of file usage.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to files used by Crypt::DSA and monitor for unusual file modifications. Avoid using affected versions in untrusted environments.