CVE-2014-125112

Katalog CVE

CVSS 9.8 · Critical EPSS 0,83%

Kerentanan Reliance on Cookies without Validation and Integrity Checking pada miyagawa plack. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP.

Deskripsi (NVD)

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when there is no secret used to sign the cookie.

Rincian

Terbit di NVD

26 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-565: Reliance on Cookies without Validation and Integrity Checking

EPSS (30 hari)

0,83% peluang dieksploitasi; lebih tinggi dari 56,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/miyagawa/2b8764af908a0dacd43d advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2026/03/26/2 mailing list · advisory pihak ketiga
• https://metacpan.org/release/MIYAGAWA/Plack-Middleware-Session-0.23-TRIAL/changes release notes