ByteOS Network

NVD Vulnerability Details :

CVE-2012-6141

Deferred

Source-secalert@redhat.com

Published At-04 Jun, 2014 | 23:55

Updated At-12 Apr, 2025 | 10:46

The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1) App::Session::Cookie or (2) App::Session::HTMLHidden, which is not properly handled when it is deserialized.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.01:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.93:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.95:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.96:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.961:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.962:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.963:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.964:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.965:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.966:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.967:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.968:*:*:*:*:perl:*:*

stephen_adkins>>app\>>\

cpe:2.3:a:stephen_adkins:app\:\:context:0.9661:*:*:*:*:perl:*:*

Weaknesses

CWE ID	Type	Source
CWE-94	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://seclists.org/oss-sec/2013/q2/318	secalert@redhat.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/84198	secalert@redhat.com	N/A
http://seclists.org/oss-sec/2013/q2/318	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/84198	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History