IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-05-26 23:16

MODIFIED

2026-05-26 23:16

EPSS (Prob. Exploit)

0.40%

Top 67.1%

DATA SOURCES:

NVD 🔗 2026-05-27 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Version 0.06 changes the module from being a statsd client to using a separate statsd client. It defaults to using a version of Net::Statsd::Tiny that fixes a similar issue (CVE-2026-46720).

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-93

> CWE DETAILED DESCRIPTIONS

CWE-93: Improper Neutralization of CRLF Sequences - The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.

> HISTORIQUE DES MODIFICATIONS

Première apparition

26/05/2026 23:16

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:59

CWE

Champ modifié: Description CWE

Ancienne valeur:

CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection') - The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutr...

Nouvelle valeur:

📊 ENRICHISSEMENT 01/06/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

Total des modifications: 2 Dernière mise à jour: 6 days ago