CVEvulnerability

CVE-2012-5572

5.0 MEDIUM Published 2014-05-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-05-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-20

Description

CRLF injection vulnerability in the cookie method (lib/Dancer/Cookie.pm) in Dancer before 1.3114 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name, a different vulnerability than CVE-2012-5526.

Affected configurations

• dancer dancer (<= 1.3113) • dancer dancer 1.150 • dancer dancer 1.3060 • dancer dancer 1.3071 • dancer dancer 1.3079 3 • dancer dancer 1.3079 5 • dancer dancer 1.3110 • dancer dancer 1.3111 • dancer dancer 1.3111 01 • dancer dancer 1.3112

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References