CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or…
Priority LOW 29CWE-16Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
Why it matters now
EPSS 0.03261 88th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:andy_armstrong:cgi.pm:*:*:*:*:*:*:*:* | up to 3.62 | Vulnerable | Andy Armstrong |
- cpe:2.3:a:andy_armstrong:cgi.pm:*:*:*:*:*:*:*:* Versions up to 3.62 Vulnerable ·Andy Armstrong
Remediation
Red Hat 1 advisory
- RHSA-2013:0685 Released 2013-03-26 · Red Hat rating Moderateperl security update
- Red Hat Enterprise Linux (v. 5 server) perl-4:5.8.8-40.el5_9, perl-4:5.8.8-40.el5_9.i386, perl-4:5.8.8-40.el5_9.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 6) perl-4:5.10.1-130.el6_4, perl-Archive-Extract-1:0.38-130.el6_4, perl-Archive-Tar-1.58-130.el6_4 +43
- Red Hat Enterprise Linux HPC Node (v. 6) perl-4:5.10.1-130.el6_4, perl-Archive-Extract-1:0.38-130.el6_4, perl-Archive-Tar-1.58-130.el6_4 +43
- Red Hat Enterprise Linux Server (v. 6) perl-4:5.10.1-130.el6_4, perl-Archive-Extract-1:0.38-130.el6_4, perl-Archive-Tar-1.58-130.el6_4 +45
- Red Hat Enterprise Linux Workstation (v. 6) perl-4:5.10.1-130.el6_4, perl-Archive-Extract-1:0.38-130.el6_4, perl-Archive-Tar-1.58-130.el6_4 +43
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2013:0685 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2013:0685 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2013:0685 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2013:0685 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2013:0685 |
Timeline
- 2026-10-02 Threatist record created from CVE-2012-5526
- 2026-10-03 Alias added: GHSA-9x3m-wmpr-vc58
References
Advisory 3
Other 6
- http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
- http://cpansearch.perl.org/src/MARKSTOS/CGI.pm-3.63/Changes
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- https://github.com/markstos/CGI.pm/pull/23
- [oss-security] 20121115 Re: CVE Request -- perl-CGI: Newline injection due to improper CRLF escaping in Set-Cookie and P3P headers
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
More Andy Armstrong Cgi.pm vulnerabilities
- TI-2010-04144 Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject… CVSS 2.0MEDIUM 4.3
- TI-2010-04143 CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2)… CVSS 2.0MEDIUM 4.3
- TI-2010-02645 The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2012-5526 · CVE Program
- CVE-2012-5526 · NVD
- FIRST EPSS
- GHSA-9x3m-wmpr-vc58 · GitHub Advisory Database · CC BY 4.0
- CVE-2012-5526 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences