VULNERABILITY INTELLIGENCE

CVE-2012-6142

CVSS score7.5 HIGH

EPSS probability2.72%

CISA KEVNot currently listed

Published2014-06-04

Last modified2026-06-16

Description

Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.