CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-Compress-Raw-ZlibUpgrade perl-ExtUtils-EmbedUpgrade perl-Object-AccessorUpgrade perl-IO-Compress-Bzip2Upgrade perl-CGIUpgrade perl-Archive-ExtractUpgrade perl-coreUpgrade perl-Term-UIUpgrade perl-Time-HiResUpgrade perl-Params-CheckUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Log-MessageUpgrade perl-Time-PieceUpgrade perl-ExtUtils-CBuilderUpgrade perl-IO-Compress-BaseUpgrade perl-CPANPLUSUpgrade perl-CPANUpgrade perl-Parse-CPAN-MetaUpgrade perl-Pod-EscapesUpgrade perl-File-FetchUpgrade perl-Package-ConstantsUpgrade perl-Log-Message-SimpleUpgrade perl-Digest-SHAUpgrade perl-Compress-ZlibUpgrade perl-Archive-TarUpgrade perl-parentUpgrade perl-IO-Compress-ZlibUpgrade perl-Locale-Maketext-SimpleUpgrade perl-IPC-CmdUpgrade perl-develUpgrade perl-Module-PluggableUpgrade perl-Test-HarnessUpgrade perl-Module-Load-ConditionalUpgrade perl-suidperlUpgrade perl-Test-SimpleUpgrade perl-versionUpgrade perl-Module-BuildUpgrade perl-libsUpgrade perl-IO-ZlibUpgrade perl-Pod-SimpleUpgrade perlUpgrade perl-Module-CoreListUpgrade perl-Module-LoadedUpgrade perl-Compress-Raw-Bzip2Upgrade perl-ExtUtils-ParseXSUpgrade perl-Module-Load | Dec 1, 2016 | Nov 21, 2012 |
| Debian | — | Upgrade libcgi-pm-perlUpgrade perl | Jul 30, 2024 | Nov 21, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 15, 2015 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory3 | Nov 30, 2017 | Nov 21, 2012 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade runtime/perl-512 to version 5.12.5-0.175.1.7.0.2.0 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade runtime/perl-584 to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1 | May 29, 2017 | Nov 21, 2012 |
| Oracle_linux | — | Upgrade perl-Archive-ExtractUpgrade perl-IPC-CmdUpgrade perl-IO-Compress-ZlibUpgrade perl-Object-AccessorUpgrade perl-Log-MessageUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-ParseXSUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Module-Load-ConditionalUpgrade perl-CPANUpgrade perl-ExtUtils-EmbedUpgrade perl-Module-PluggableUpgrade perl-Module-LoadedUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Compress-ZlibUpgrade perl-Module-LoadUpgrade perl-ExtUtils-CBuilderUpgrade perl-coreUpgrade perl-IO-Compress-BaseUpgrade perl-File-FetchUpgrade perl-Log-Message-SimpleUpgrade perl-Time-PieceUpgrade perl-Params-CheckUpgrade perl-CPANPLUSUpgrade perl-Test-SimpleUpgrade perl-Parse-CPAN-MetaUpgrade perl-Term-UIUpgrade perlUpgrade perl-Digest-SHAUpgrade perl-Pod-SimpleUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Compress-Raw-ZlibUpgrade perl-Module-BuildUpgrade perl-libsUpgrade perl-IO-Compress-Bzip2Upgrade perl-Test-HarnessUpgrade perl-Pod-EscapesUpgrade perl-Archive-TarUpgrade perl-Package-ConstantsUpgrade perl-suidperlUpgrade perl-CGIUpgrade perl-parentUpgrade perl-versionUpgrade perl-IO-ZlibUpgrade perl-Time-HiResUpgrade perl-devel | Oct 16, 2024 | Nov 21, 2012 |
| Suse | — | Upgrade perl-base-32bitUpgrade perl-base-x86Upgrade perlUpgrade perl-baseUpgrade perl-debuginfo-x86Upgrade perl-x86Upgrade perl-debuginfoUpgrade perl-debuginfo-32bitUpgrade perl-debugsourceUpgrade perl-base-debuginfoUpgrade perl-docUpgrade perl-base-debuginfo-x86Upgrade perl-64bitUpgrade perl-32bitUpgrade perl-base-debuginfo-32bit | Feb 17, 2015 | Nov 21, 2012 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | Nov 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub