Skip to content
OpenAdvisories
Unscored DSA-2587-1 1 CVE

libcgi-pm-perl - HTTP header injection

Published Dec 11, 2012 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 libcgi-pm-perl 3.49-1squeeze2

Vulnerabilities 1

  • Unscored —

    CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might …