CVE:CVE-2012-5572
CNNVD:CNNVD-201212-042
Dancer是法国软件开发者Alexis Sukrieh所研发的一个基于Perl语言的Web应用框架。
Dancer 1.3113及之前版本的cookie方法(lib/Dancer/Cookie.pm)中存在CRLF注入漏洞。远程攻击者可借助cookie名利用该漏洞注入任意HTTP头，实施HTTP响应拆分攻击。
solution:Upgrade dancer dancer to a higher version than 1.3113,1.150,1.3060,1.3071,1.3079_3,1.3079_5,1.3110,1.3111,1.3111_01,1.3112,and avoid the version (,1.3113],1.150,1.3060,1.3071,1.3079_3,1.3079_5,1.3110,1.3111,1.3111_01,1.3112