CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-test-unitUpgrade rubygem-rbsUpgrade rubygem-bigdecimalUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade ruby-develUpgrade rubygem-jsonUpgrade rubygem-rssUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-io-consoleUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade rubygem-bsonUpgrade rubygem-rakeUpgrade rubygem-mysql2Upgrade rubygem-abrtUpgrade rubygem-abrt-docUpgrade rubygem-mongoUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygem-bundler-docUpgrade rubygem-typeprofUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-bson-docUpgrade rubygem-pg-docUpgrade rubygem-psychUpgrade rubygem-net-telnetUpgrade ruby-libsUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-pgUpgrade rubygem-minitest | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-psychUpgrade ruby-tcltkUpgrade rubygem-jsonUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-typeprofUpgrade rubygem-net-telnetUpgrade rubygem-rssUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubyUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-rbsUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-did_you_meanUpgrade ruby-default-gemsUpgrade rubygem-rexmlUpgrade rubygem-bigdecimalUpgrade rubygem-xmlrpcUpgrade rubygem-opensslUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade rubygem-bundler | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-bson-docUpgrade ruby-libsUpgrade rubygem-bsonUpgrade rubygem-rexmlUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-rssUpgrade rubygems-develUpgrade rubygem-did_you_meanUpgrade rubygem-bson-debuginfoUpgrade ruby-irbUpgrade ruby-docUpgrade rubygem-openssl-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-mongo-docUpgrade ruby-debugsourceUpgrade rubygem-typeprofUpgrade rubyUpgrade rubygem-net-telnetUpgrade ruby-develUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrtUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-jsonUpgrade rubygem-pgUpgrade rubygem-pg-docUpgrade ruby-libs-debuginfoUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-io-console-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-pg-debugsourceUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubygem-minitestUpgrade rubygem-abrt-docUpgrade rubygem-bundler-docUpgrade rubygem-mysql2-docUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade ruby-default-gems | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade ruby30Upgrade rubygem-cgiUpgrade ruby26Upgrade rubyUpgrade ruby27 | Nov 4, 2022 | Nov 24, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | May 25, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Mar 22, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-helpUpgrade ruby-irb | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade ruby-docUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubygem-pg-docUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygem-rakeUpgrade ruby-irbUpgrade ruby-develUpgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-rbsUpgrade rubyUpgrade rubygem-bundlerUpgrade rubygem-test-unitUpgrade rubygem-opensslUpgrade rubygem-irbUpgrade rubygem-rexmlUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade rubygem-bson-docUpgrade rubygem-bundler-docUpgrade rubygem-io-consoleUpgrade rubygem-mongoUpgrade rubygem-psychUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-bsonUpgrade rubygem-pgUpgrade rubygem-power_assertUpgrade ruby-libsUpgrade rubygemsUpgrade rubygem-abrt-docUpgrade rubygem-jsonUpgrade rubygem-net-telnetUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-rss | Feb 17, 2022 | Nov 24, 2021 |
| Redhat_linux | — | Upgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubygem-did_you_meanUpgrade ruby-default-gemsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-irbUpgrade rubygem-rexmlUpgrade ruby-irbUpgrade rubyUpgrade rubygem-bundler-docUpgrade ruby-develUpgrade ruby-docUpgrade rubygem-pg-debuginfoUpgrade ruby-libsUpgrade rubygem-mysql2Upgrade rubygem-pg-debugsourceUpgrade rubygem-rssUpgrade rubygem-abrtNo solution existsUpgrade rubygem-psych-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-opensslUpgrade rubygem-pgUpgrade rubygem-rakeUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-pg-docUpgrade rubygem-bson-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mongoUpgrade ruby-debuginfoUpgrade rubygem-power_assertUpgrade rubygemsUpgrade ruby-libs-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-abrt-docUpgrade ruby-debugsourceUpgrade rubygem-test-unitUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-openssl-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade rubygem-bson-docUpgrade rubygem-rdoc | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-mysql2Upgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-json-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade rubygem-psychUpgrade ruby-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bsonUpgrade rubygem-mysql2-debuginfoUpgrade rubyUpgrade rubygem-bson-debugsourceUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-opensslUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade ruby-devel | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-stdlibUpgrade ruby2.5Upgrade ruby2.5-develUpgrade ruby2.5-doc-riUpgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5Upgrade ruby2.5-doc | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.7Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.5 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub