Unscored CVE-2012-6142 EUVD-2012-6003GHSA-5f3x-vhw5-3rcg

Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to …

Published Jun 4, 2014 · Updated Aug 6, 2024 · Assigned by redhat

Description

Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.

References

htmlep-cve20126142-sec-bypass(84199) vdb-entry
[oss-security] 20130514 Re: CVE Request: Storable::thaw called on cookie data in multiple CPAN modules mailing-list
59833 vdb-entry