CVE-2012-5526

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject…

published November 21, 2012

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03261 · 88.2th percentile
Published
2012-11-21T23:00Z
EPSS history
Timeline
  • 21 NOV 23:00Z
    CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject…
    cvelistv5