Andy Armstrong

1 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-5526 Nov 21, 23:55 MEDIUM This Month

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Code Injection Cgi Pm Andy Armstrong

NVD GitHub

CVSS 2.0

5.0

EPSS

1.7%

CVE-2012-5526

EPSS 2% CVSS 5.0

MEDIUM This Month

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Code Injection Cgi Pm Andy Armstrong

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy