{
  "cveId": "CVE-2025-40927",
  "url": "https://patchblox.com/security/cve/CVE-2025-40927",
  "summary": "CVE-2025-40927 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2025-40927, released August 29, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "libcgi-simple-perl: CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP...",
  "description": "CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting\u00A0flaw in CGI::Simple\u00A0that allows HTTP response header injection, which can be used for reflected XSS or open redirect under certain conditions.  Although some validation exists, it can be bypassed using URL-encoded values, allowing an attacker to inject untrusted content into the response via query parameters.    As a result, an attacker can inject a line break (e.g. %0A) into the parameter value, causing the server to split the HTTP response and inject arbitrary headers or even an HTML/JavaScript body, leading to reflected cross-site scripting (XSS), open redirect or other attacks.  The issue documented in CVE-2010-4410 https://www.cve.org/CVERecord?id=CVE-2010-4410 is related but the fix was incomplete.  Impact  By injecting %0A\u00A0(newline) into a query string parameter, an attacker can:    *  Break the current HTTP header   *  Inject a new header or entire body   *  Deliver a script payload that is reflected in the server\u2019s response That can lead to the following attacks:    *  reflected XSS   *  open redirect   *  cache poisoning   *  header manipulation",
  "published": "2025-08-29T01:15:34Z",
  "severity": "high",
  "cvss": 7.3,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
  "epss": 0.00485,
  "epssPercentile": 0.42005,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libcgi-simple-perl",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1.280-2\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2025-40927",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40927",
      "released": "2025-08-29T01:15:34Z"
    },
    {
      "platform": "linux",
      "product": "libcgi-simple-perl",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.282-1~deb13u1",
      "fix": "DEBIAN-CVE-2025-40927",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40927",
      "released": "2025-08-29T01:15:34Z"
    },
    {
      "platform": "linux",
      "product": "libcgi-simple-perl",
      "release": "Debian 14",
      "fixedVersion": "1.282-1",
      "fix": "DEBIAN-CVE-2025-40927",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40927",
      "released": "2025-08-29T01:15:34Z"
    },
    {
      "platform": "linux",
      "product": "perl-CGI-Simple",
      "release": "Fedora 43",
      "fixedVersion": "1:1.282-1.fc43",
      "fix": "FEDORA-2025-3DD97ED203",
      "url": "https://patchblox.com/security/fix/linux/fedora-2025-3dd97ed203",
      "released": "2025-12-02T11:23:01Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}