Unscored severity · published Jun 4, 2014
CVE-2012-6143
Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request,…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Spoon::Cookie in the Spoon module 0.24 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
Spoon · Ingy
0.24 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-6143
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-6143
seclists.org
http://seclists.org/oss-sec/2013/q2/318
www.securityfocus.com
http://www.securityfocus.com/bid/59834
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/84197
rt.cpan.org
https://rt.cpan.org/Public/Bug/Display.html?id=85217