4.3

CVE-2010-4410: andy_armstrong cgi-simple Code Injection

CVSS: 4.3v2.0MediumModified
AliasesDEBIAN-CVE-2010-4410
Published 06-12-2010Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2010-4410 is a medium (CVSS 4.3) Code Injection vulnerability in andy_armstrong cgi-simple. EPSS estimates a 2.49% chance of exploitation in the next 30 days, higher than 84.4% of scored vulnerabilities.

Overall risk
18/100
0100
Low · default modelHow is this calculated?
CVSS score
4.3/10
010
Medium · v2.0 (NVD)
EPSS score
2.49%
0%100%
Low · +0.43 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 2
OPENSUSE-SU-2024:10449-1OPENSUSE-SU-2024:10545-1RHSA-2011:0558RHSA-2011:1797

Timeline

  1. 06-12-2010
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

2.49%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

+0.43 pp

From 2.06% on 21-09-2026

21-09-202621-10-2026
EPSS score
2.49%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian3 products
  • libcgi-pm-perl< 3.50-1
  • libcgi-simple-perl< 1.111-2
  • perl< 5.10.1-17
Andy_armstrong2 products
  • cgi-simple≤ 1.112 | 0.078 | 0.079 | 0.080 | 0.081 | 0.082 | 0.83 | 1.0 | 1.1 | 1.1.1 | 1.1.2 | 1.103 | 1.104 | 1.105 | 1.106 | 1.107 | 1.108 | 1.109 | 1.110 | 1.111
  • cgi.pm≤ 3.49 | 1.4 | 1.42 | 1.43 | 1.44 | 1.45 | 1.50 | 1.51 | 1.52 | 1.53 | 1.54 | 1.55 | 1.56 | 1.57 | 2.0 | 2.01 | 2.13 | 2.14 | 2.15 | 2.16 | 2.17 | 2.18 | 2.19 | 2.20 | 2.21 | 2.22 | 2.23 | 2.24 | 2.25 | 2.26 | 2.27 | 2.28 | 2.29 | 2.30 | 2.31 | 2.32 | 2.33 | 2.34 | 2.35 | 2.36 | 2.37 | 2.38 | 2.39 | 2.40 | 2.41 | 2.42 | 2.43 | 2.44 | 2.45 | 2.46 | 2.47 | 2.48 | 2.49 | 2.50 | 2.51 | 2.52 | 2.53 | 2.54 | 2.55 | 2.56 | 2.57 | 2.58 | 2.59 | 2.60 | 2.61 | 2.62 | 2.63 | 2.64 | 2.65 | 2.66 | 2.67 | 2.68 | 2.69 | 2.70 | 2.71 | 2.72 | 2.73 | 2.74 | 2.75 | 2.76 | 2.77 | 2.78 | 2.79 | 2.80 | 2.81 | 2.82 | 2.83 | 2.84 | 2.85 | 2.86 | 2.87 | 2.88 | 2.89 | 2.90 | 2.91 | 2.92 | 2.93 | 2.94 | 2.95 | 2.96 | 2.97 | 2.98 | 2.99 | 2.751 | 2.752 | 3.00 | 3.01 | 3.02 | 3.03 | 3.04 | 3.05 | 3.06 | 3.07 | 3.08 | 3.09 | 3.10 | 3.11 | 3.12 | 3.13 | 3.14 | 3.15 | 3.16 | 3.17 | 3.18 | 3.19 | 3.20 | 3.21 | 3.22 | 3.23 | 3.24 | 3.25 | 3.26 | 3.27 | 3.28 | 3.29 | 3.30 | 3.31 | 3.32 | 3.33 | 3.34 | 3.35 | 3.36 | 3.37 | 3.38 | 3.39 | 3.40 | 3.41 | 3.42 | 3.43 | 3.44 | 3.45 | 3.46 | 3.47 | 3.48

2 vendors · 5 products

References

25 links
Show all 25 references