CVE-2012-5526
andy armstrong cgi.pm: no CVSS score yet. EPSS 3.3% chance of exploitation in the next 30 days.
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
- EPSS
- 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-11-01)
- CWE
- CWE-16
- Published
- Modified
- Record from
- the NVD, synced
Affected
- andy_armstrong:cgi.pm