> CVE-2014-125112

« BACK_TO_HOME
PUBLISHED
2026-03-26 03:16
MODIFIED
2026-03-26 03:16
EPSS (Prob. Exploit)
0.85%
Top 41.7%
DATA SOURCES:
NVD 🔗 2026-03-26 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08

> DESCRIPTION

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when there is no secret used to sign the cookie.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-565

> CWE DETAILED DESCRIPTIONS

CWE-565: Reliance on Cookies without Validation and Integrity Checking - The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.

> HISTORIQUE DES MODIFICATIONS

Première apparition
26/03/2026 03:16
Source: NVD
📊 ENRICHISSEMENT 01/04/2026 06:02
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-565: Reliance on Cookies without Validation and Integrity Checking - The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly...
Total des modifications: 1 Dernière mise à jour: 7 months ago

> REFERENCES

https://gist.github.com/miyagawa/2b8764af908a0dacd43d
https://metacpan.org/release/MIYAGAWA/Plack-Middleware-Session-0.23-TRIAL/change...
« BACK_TO_HOME