Beveiligingsadvies

CVE-2012-6141

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-06-04 23:00:00
Laatst bijgewerkt 2024-08-06 21:28:39
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1) App::Session::Cookie or (2) App::Session::HTMLHidden, which is not properly handled when it is deserialized.