Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution. Plack::Middleware::Session::Cookie versions through 0.21 has a security vulnerability where it allows an attacker to execute arbitrary code on the server during deserialization of the cookie data, when there is no secret used to sign the cookie.
| Vendor | Product | Versions |
|---|---|---|
| MIYAGAWA | Plack::Middleware::Session::Cookie | 0 |
Updated severity to CRITICAL and added CVE-2014-125112 as a relevant tag.
Updated severity to HIGH, added CVSS estimate of 7.5, and marked the vulnerability as actively exploited with an exploit available.
Initial creation
