CVE-2016-1238

CVE-2016-1238 describes a local privilege escalation vulnerability affecting Perl 5.x versions before 5.22.3-RC2 and 5.24 before 5.24.1-RC2. This flaw allows local users to gain privileges by exploiting improper handling of the includes directory array, enabling the execution of a Trojan horse module from the current working directory. With a CVSS v3.1 score of 7.8 (High), this vulnerability has a low attack complexity and requires local user privileges, but can lead to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.