CVE-2012-6141

The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code…

published June 4, 2014

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1) App::Session::Cookie or (2) App::Session::HTMLHidden, which is not properly handled when it is deserialized.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02326 · 83.3th percentile
Published
2014-06-04T23:00Z
EPSS history
Timeline
  • 04 JUN 23:00Z
    The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code…
    cvelistv5