CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-Module-LoadedUpgrade perl-versionUpgrade perl-Test-SimpleUpgrade perl-libsUpgrade perl-Module-Load-ConditionalUpgrade perl-Locale-Maketext-SimpleUpgrade perl-IPC-CmdUpgrade perl-Test-HarnessUpgrade perl-IO-ZlibUpgrade perl-Module-BuildUpgrade perl-develUpgrade perl-Module-LoadUpgrade perl-ExtUtils-ParseXSUpgrade perl-suidperlUpgrade perl-Pod-SimpleUpgrade perl-Module-PluggableUpgrade perl-Compress-Raw-Bzip2Upgrade perl-IO-Compress-ZlibUpgrade perlUpgrade perl-Module-CoreListUpgrade perl-Log-Message-SimpleUpgrade perl-ExtUtils-MakeMakerUpgrade perl-CGIUpgrade perl-IO-Compress-Bzip2Upgrade perl-Params-CheckUpgrade perl-ExtUtils-CBuilderUpgrade perl-Archive-ExtractUpgrade perl-Compress-Raw-ZlibUpgrade perl-Parse-CPAN-MetaUpgrade perl-File-FetchUpgrade perl-Time-HiResUpgrade perl-Pod-EscapesUpgrade perl-Digest-SHAUpgrade perl-IO-Compress-BaseUpgrade perl-Compress-ZlibUpgrade perl-Time-PieceUpgrade perl-CPANUpgrade perl-Object-AccessorUpgrade perl-CPANPLUSUpgrade perl-Log-MessageUpgrade perl-ExtUtils-EmbedUpgrade perl-Package-ConstantsUpgrade perl-Archive-TarUpgrade perl-parentUpgrade perl-coreUpgrade perl-Term-UI | Dec 1, 2016 | Nov 21, 2012 |
| Debian | — | Upgrade libcgi-pm-perlUpgrade perl | Jul 30, 2024 | Nov 21, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 15, 2015 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory3 | Nov 30, 2017 | Nov 21, 2012 |
| Oracle Solaris | — | Upgrade runtime/perl-512 to version 5.12.5-0.175.1.7.0.2.0 on Solaris 11.1Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade runtime/perl-584 to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2 | May 29, 2017 | Nov 21, 2012 |
| Oracle_linux | — | Upgrade perl-Term-UIUpgrade perl-CGIUpgrade perl-Parse-CPAN-MetaUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Test-SimpleUpgrade perl-libsUpgrade perl-parentUpgrade perl-IO-Compress-Bzip2Upgrade perl-Pod-SimpleUpgrade perl-Test-HarnessUpgrade perl-Digest-SHAUpgrade perl-versionUpgrade perl-Pod-EscapesUpgrade perl-suidperlUpgrade perl-Module-BuildUpgrade perl-Archive-TarUpgrade perlUpgrade perl-Compress-Raw-ZlibUpgrade perl-develUpgrade perl-IO-ZlibUpgrade perl-Time-HiResUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Log-Message-SimpleUpgrade perl-IO-Compress-BaseUpgrade perl-Object-AccessorUpgrade perl-Time-PieceUpgrade perl-CPANPLUSUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Compress-ZlibUpgrade perl-Module-PluggableUpgrade perl-ExtUtils-EmbedUpgrade perl-Module-Load-ConditionalUpgrade perl-Module-LoadUpgrade perl-CPANUpgrade perl-Log-MessageUpgrade perl-Module-LoadedUpgrade perl-ExtUtils-CBuilderUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-ParseXSUpgrade perl-Archive-ExtractUpgrade perl-coreUpgrade perl-Params-CheckUpgrade perl-File-FetchUpgrade perl-IPC-CmdUpgrade perl-IO-Compress-Zlib | Oct 16, 2024 | Nov 21, 2012 |
| Suse | — | Upgrade perl-Test-SimpleUpgrade perl-32bitUpgrade perl-docUpgrade perl-Module-BuildUpgrade perl-base-32bitUpgrade perl-baseUpgrade perl-x86Upgrade perl | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | Nov 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub