CVE-2012-6141 The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1) App::Session...
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1) App::Session::Cookie or (2) App::Session::HTMLHidden, which is not properly handled when it is deserialized.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stephen adkins appcontext | = 0.01 | No fix listed |
| stephen adkins appcontext | = 0.93 | No fix listed |
| stephen adkins appcontext | = 0.95 | No fix listed |
| stephen adkins appcontext | = 0.96 | No fix listed |
| stephen adkins appcontext | = 0.961 | No fix listed |
| stephen adkins appcontext | = 0.962 | No fix listed |
| stephen adkins appcontext | = 0.963 | No fix listed |
| stephen adkins appcontext | = 0.964 | No fix listed |
| stephen adkins appcontext | = 0.965 | No fix listed |
| stephen adkins appcontext | = 0.966 | No fix listed |
| stephen adkins appcontext | = 0.967 | No fix listed |
| stephen adkins appcontext | = 0.968 | No fix listed |
| stephen adkins appcontext | = 0.9661 | No fix listed |