| Package | Affected versions | Patched versions |
|---|---|---|
| cgi.pm | ≤ 3.62 |
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free