Updated perl-Dancer package fixes CVE-2012-5572

2013-06-2622:11:16

Gentoo Foundation

advisories.mageia.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

77.6%

JSON

A security flaw was found in the way Dancer.pm, lightweight yet powerful web application framework / Perl language module, performed sanitization of values to be used for cookie() and cookies() methods. A remote attacker could use this flaw to inject arbitrary headers into responses from (Perl) applications, that use Dancer.pm (CVE-2012-5572).

OSVersionArchitecturePackageVersionFilename
Mageia2noarchperl-dancer< 1.311.500-1perl-Dancer-1.311.500-1.mga2
Mageia3noarchperl-dancer< 1.311.500-1perl-Dancer-1.311.500-1.mga3