CVE

Id
59385  
CVE No.
CVE-2012-6142  
Status
Candidate  
Description
Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
604941 59385 CVE-2012-6142 MLIST:[oss-security] 20130514 Re: CVE Request: Storable::thaw called on cookie data in multiple CPAN modules  View
604942 59385 CVE-2012-6142 URL:http://seclists.org/oss-sec/2013/q2/318  View
604943 59385 CVE-2012-6142 BID:59833  View
604944 59385 CVE-2012-6142 URL:http://www.securityfocus.com/bid/59833  View
604945 59385 CVE-2012-6142 XF:htmlep-cve20126142-sec-bypass(84199)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30309 JVNDB-2012-006017 TYPO3 の Backend API の tree render API におけるクロスサイトスクリプティングの脆弱性 TYPO3 の Backend API の tree render API (TCA-Tree) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-6147 59385 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006017.html  View