The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ruby-default-gemsUpgrade rubygem-irbUpgrade rubygem-pg-docUpgrade rubygem-rexmlUpgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-rbsUpgrade rubygem-mongo-docUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-bundler-docUpgrade rubygem-opensslUpgrade ruby-irbUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2Upgrade rubyUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade rubygem-pgUpgrade rubygem-rssUpgrade rubygems-develUpgrade rubygem-bigdecimalUpgrade rubygem-power_assertUpgrade rubygem-bson-docUpgrade rubygemsUpgrade rubygem-net-telnetUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade rubygem-mongoUpgrade rubygem-test-unitUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-typeprof | Jul 4, 2023 | Nov 18, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Nov 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade ruby-develUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade rubygem-io-consoleUpgrade rubyUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-rakeUpgrade ruby-tcltkUpgrade rubygem-irbUpgrade rubygem-bigdecimalUpgrade rubygem-rbsUpgrade rubygem-rexmlUpgrade ruby-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-rssUpgrade rubygem-net-telnetUpgrade rubygem-minitestUpgrade rubygems-develUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade rubygem-power_assertUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-typeprofUpgrade rubygem-test-unitUpgrade rubygemsUpgrade ruby-default-gemsUpgrade rubygem-rdoc | Sep 28, 2023 | Nov 18, 2022 |
| Centos_linux | — | Upgrade rubygem-psychUpgrade ruby-debuginfoUpgrade rubygemsUpgrade rubygem-mongo-docUpgrade ruby-libs-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-pg-docUpgrade rubygem-mysql2Upgrade rubygem-mysql2-debugsourceUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade rubygem-abrtUpgrade rubygem-psych-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-abrt-docUpgrade rubygem-bson-debuginfoUpgrade ruby-docUpgrade rubyUpgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade rubygem-did_you_meanUpgrade rubygem-pg-debugsourceUpgrade ruby-libsUpgrade rubygem-mongoUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade rubygems-develUpgrade rubygem-bson-debugsourceUpgrade rubygem-opensslUpgrade rubygem-io-console-debuginfoUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-power_assertUpgrade rubygem-bundler-docUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade rubygem-rdocUpgrade rubygem-bson-docUpgrade rubygem-rakeUpgrade rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-net-telnet | Jun 28, 2023 | Nov 18, 2022 |
| Debian | — | Upgrade ruby3.1Upgrade ruby2.7 | Jun 12, 2023 | Nov 18, 2022 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Freebsd | — | Upgrade ruby30Upgrade ruby27Upgrade rubyUpgrade ruby31Upgrade ruby32Upgrade rubygem-cgi | Nov 25, 2022 | Nov 24, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Mar 20, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | May 8, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Apr 13, 2023 | Nov 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Mar 9, 2023 | Nov 18, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 22, 2023 |
| Oracle_linux | — | Upgrade rubygem-opensslUpgrade rubygem-rbsUpgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2Upgrade rubygem-typeprofUpgrade rubygem-mongoUpgrade rubygemsUpgrade rubyUpgrade rubygem-psychUpgrade rubygem-bundlerUpgrade rubygem-rssUpgrade rubygem-abrtUpgrade ruby-irbUpgrade ruby-develUpgrade rubygem-bsonUpgrade rubygem-pgUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade rubygem-net-telnetUpgrade ruby-default-gemsUpgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-bundler-docUpgrade rubygem-minitestUpgrade rubygem-bson-docUpgrade rubygem-mysql2-docUpgrade rubygem-io-consoleUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimalUpgrade rubygem-mongo-docUpgrade ruby-docUpgrade rubygem-rexmlUpgrade rubygem-xmlrpcUpgrade rubygem-rdocUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade rubygems-develUpgrade rubygem-did_you_mean | Jul 8, 2023 | Nov 18, 2022 |
| Redhat_linux | — | Upgrade rubygem-psych-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-abrt-docUpgrade ruby-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygems-develUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade rubygem-xmlrpcUpgrade rubygem-rbs-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-power_assertUpgrade rubygem-bson-docUpgrade rubygem-psychUpgrade rubygem-pg-debuginfoUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygemsUpgrade rubygem-io-consoleUpgrade ruby-libsUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-net-telnetUpgrade rubygem-minitestUpgrade rubygem-typeprofUpgrade ruby-libs-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-rbsUpgrade rubygem-rssUpgrade rubygem-mysql2Upgrade rubygem-rdocUpgrade rubygem-mysql2-docUpgrade rubygem-jsonNo solution existsUpgrade rubygem-bsonUpgrade rubyUpgrade rubygem-mysql2-debuginfoUpgrade ruby-default-gemsUpgrade ruby-docUpgrade rubygem-pg-docUpgrade ruby-irbUpgrade rubygem-abrtUpgrade rubygem-opensslUpgrade rubygem-pgUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mongo-docUpgrade rubygem-bundlerUpgrade ruby-bundled-gemsUpgrade rubygem-pg-debugsourceUpgrade rubygem-rexmlUpgrade rubygem-bundler-docUpgrade rubygem-irbUpgrade rubygem-mongoUpgrade rubygem-did_you_meanUpgrade ruby-develUpgrade ruby-bundled-gems-debuginfo | Jun 28, 2023 | Nov 18, 2022 |
| Rocky_linux | — | Upgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-develUpgrade rubygem-bson-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade ruby-libs-debuginfoUpgrade rubygem-opensslUpgrade rubygem-bsonUpgrade rubygem-rbs-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-psych-debuginfoUpgrade rubygem-rbsUpgrade ruby-libsUpgrade rubygem-pgUpgrade rubygem-bigdecimalUpgrade rubyUpgrade ruby-debuginfoUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-psychUpgrade ruby-debugsource | Mar 5, 2024 | Nov 18, 2022 |
| Suse | — | Upgrade ruby2.5Upgrade ruby2.5-stdlibUpgrade ruby2.5-develUpgrade ruby2.5-docUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-ri | Aug 9, 2024 | Nov 18, 2022 |
| Ubuntu | — | Upgrade ruby3.0Upgrade libruby3.0Upgrade libruby3.1Upgrade ruby2.7Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.5Upgrade libruby2.7Upgrade libruby2.5Upgrade ruby3.1Upgrade libruby2.3 (Ubuntu Pro) | Jan 18, 2023 | Nov 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub