CVE-2014-125112

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0270%

EPSS Percentile31.94th

Published2026年3月26日

Last Modified2026年5月6日

Vulnerability Description

Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when there is no secret used to sign the cookie.

Affected Platforms (CPE)

📦

Miyagawa

Plack\

< 0.23

References & Advisories

🔗 https://gist.github.com/miyagawa/2b8764af908a0dacd43d

🔗 https://metacpan.org/release/MIYAGAWA/Plack-Middleware-Session-0.23-TRIAL/changes

🔗 http://www.openwall.com/lists/oss-security/2026/03/26/2

Vulnerability Description

Affected Platforms (CPE)

Plack\

References & Advisories

相關漏洞威脅