CVE-2014-125112CWE-565

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution

Critical · published March 26, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution.

Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when there is no secret used to sign the cookie.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00830 · 57.1th percentile
Weakness
CWE-565 · Reliance on Cookies without Validation and Integrity Checking
Published
2026-03-26T02:04Z
EPSS history
Timeline
  • 26 MAR 02:04Z
    Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution
    cvelistv5