The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1) App::Session::Cookie or (2) App::Session::HTMLHidden, which is not properly handled when it is deserialized.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2014-06-04T23:00:00

Updated: 2024-08-06T21:28:39.532Z

Reserved: 2012-12-06T00:00:00

Link: CVE-2012-6141

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2014-06-04T23:55:03.457

Modified: 2024-11-21T01:45:54.267

Link: CVE-2012-6141

cve-icon Redhat

No data.