CVE-2012-6141: The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, whic...

Security readout for executives and security teams

This flaw affects old Perl applications using App::Context session handling. A malicious request could make the application deserialize attacker-controlled data and run arbitrary code. Business urgency depends on whether any exposed application still uses App::Context 0.01 through 0.968 with the named session mechanisms. Exposure is likely limited to legacy Perl applications that directly use App::Context session modules, especially client-controlled cookie or hidden-form session storage. The source bundle does not identify CPEs, packaged products, or a fixed version. Treat as high priority only where legacy App::Context applications are internet-facing or process untrusted session data. If the module is absent, no direct action is indicated beyond recording the inventory result. Mitigation focus: Inventory Perl applications for App::Context versions 0.01 through 0.968.; Check CPAN or vendor guidance for a fixed release or replacement.; Remove deserialization of untrusted cookies or hidden fields where present..

Prepared

Jun 14, 2026, 07:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.