WebDyne versions from 2.022 up to but not including 3.022 for Perl have a vulnerability that allows unauthenticated remote attackers to read application source code via the built-in viewer on the default index page. This includes Perl source files and embedded __PERL__ blocks in .psp pages, potentially exposing sensitive credentials.