CVE-2010-4411: Andy Armstrong Cgi.pm

Medium severity, CVSS 4.3. EPSS: 2.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors. NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.

Affected products

• Andy Armstrong Cgi.pm: up to and including 3.50; version 1.4 only; version 1.42 only; version 1.43 only; version 1.44 only; version 1.45 only; …

Published 2010-12-06. Last modified 2026-06-16.