Unscored CVE-2012-6143 EUVD-2012-6004GHSA-xrpf-jjp4-8pmh

Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute…

Published Jun 4, 2014 · Updated Aug 6, 2024 · Assigned by redhat

Description

Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.

References

spoon-cve20126143-sec-bypass(84197) vdb-entry
[oss-security] 20130514 Re: CVE Request: Storable::thaw called on cookie data in multiple CPAN modules mailing-list
59834 vdb-entry
https://rt.cpan.org/Public/Bug/Display.html?id=85217