| Package | Affected versions | Patched versions |
|---|---|---|
| dancer | = 1.150= 1.3060= 1.3071= 1.3079_3= 1.3079_5= 1.3110= 1.3111= 1.3111_01= 1.3112≤ 1.3113 |
CRLF injection vulnerability in the cookie method (lib/Dancer/Cookie.pm) in Dancer before 1.3114 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name, a different vulnerability than CVE-2012-5526.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free