CVE

Id
59384  
CVE No.
CVE-2012-6141  
Status
Candidate  
Description
The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1) App::Session::Cookie or (2) App::Session::HTMLHidden, which is not properly handled when it is deserialized.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
604938 59384 CVE-2012-6141 MLIST:[oss-security] 20130514 Re: CVE Request: Storable::thaw called on cookie data in multiple CPAN modules  View
604939 59384 CVE-2012-6141 URL:http://seclists.org/oss-sec/2013/q2/318  View
604940 59384 CVE-2012-6141 XF:appcontext-cve20126141-sec-bypass(84198)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30505 JVNDB-2012-006213 TYPO3 の Backend History モジュールにおける任意のレコードの履歴を読まれる脆弱性 TYPO3 の Backend History モジュールは、アクセスを適切に制限しないため、任意のレコードの履歴を読まれる脆弱性が存在します。 CVE-2012-6146 59384 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006213.html  View