CVE-2026-50638
Gravedad:
Pendiente de análisis
Tipo:
CWE-93
Neutralización incorrecta de secuencias de retornos de carro y saltos de linea (CRLF)
Fecha de publicación:
10/06/2026
Última modificación:
10/06/2026
Descripción
*** Pendiente de traducción *** Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections.<br />
<br />
The statsd protocol (and extensions such as dogstatsd) allow mutiple metrics,separated by newlines, to be sent per packet.<br />
<br />
Metrics::Any::Adapter::DogStatsd which extends Metrics::Any::Adapter::Statsd, which has a similar vulnerability.<br />
<br />
In addition, the _tags function does not check tags for newlines or statsd control characters. The tags can be used for metric injections.