CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-io-consoleUpgrade rubygem-test-unitUpgrade rubygem-rssUpgrade rubygem-mongo-docUpgrade rubygem-xmlrpcUpgrade rubygem-rakeUpgrade rubyUpgrade rubygem-mysql2Upgrade rubygem-mysql2-docUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-rexmlUpgrade ruby-docUpgrade rubygem-jsonUpgrade rubygem-rbsUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-abrtUpgrade ruby-develUpgrade rubygemsUpgrade rubygem-abrt-docUpgrade rubygem-minitestUpgrade rubygem-opensslUpgrade rubygem-bundler-docUpgrade rubygem-net-telnetUpgrade rubygem-typeprofUpgrade ruby-default-gemsUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-pg-docUpgrade rubygem-mongoUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-rdoc | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-net-telnetUpgrade rubygem-power_assertUpgrade ruby-libsUpgrade rubygemsUpgrade ruby-tcltkUpgrade rubygem-minitestUpgrade rubygem-typeprofUpgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-rssUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade rubygem-opensslUpgrade rubyUpgrade ruby-default-gemsUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-rakeUpgrade rubygem-xmlrpcUpgrade ruby-develUpgrade rubygem-rexmlUpgrade rubygem-rdocUpgrade ruby-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-did_you_meanUpgrade rubygem-test-unitUpgrade rubygem-rbs | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade ruby-debuginfoUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-did_you_meanUpgrade ruby-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-rssUpgrade rubygem-mongo-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-xmlrpcUpgrade ruby-libsUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-bsonUpgrade rubygem-rexmlUpgrade rubygem-rakeUpgrade rubygem-bson-docUpgrade rubygem-bson-debuginfoUpgrade rubygem-test-unitUpgrade rubygems-develUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-default-gemsUpgrade rubygem-psychUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade rubygem-irbUpgrade rubygem-abrt-docUpgrade rubygem-minitestUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygem-mysql2Upgrade rubygem-io-console-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-pg-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygemsUpgrade rubygem-typeprofUpgrade ruby-libs-debuginfoUpgrade rubygem-rbsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrtUpgrade ruby-develUpgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade rubygem-net-telnetUpgrade rubygem-bundler-doc | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade ruby30Upgrade rubygem-cgiUpgrade ruby26Upgrade ruby27Upgrade ruby | Nov 4, 2022 | Nov 24, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade rubyUpgrade ruby-irb | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | May 25, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Mar 22, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-test-unitUpgrade ruby-develUpgrade rubygem-mongo-docUpgrade rubygem-rdocUpgrade ruby-default-gemsUpgrade rubygem-rakeUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade rubygem-did_you_meanUpgrade rubygem-rbsUpgrade ruby-docUpgrade rubyUpgrade rubygem-pg-docUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade rubygem-abrtUpgrade rubygem-opensslUpgrade rubygem-rexmlUpgrade rubygem-irbUpgrade rubygem-pgUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-bundler-docUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-rssUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygem-mongoUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygem-mysql2Upgrade rubygem-minitestUpgrade rubygem-bson-docUpgrade rubygem-bsonUpgrade rubygem-power_assertUpgrade ruby-libs | Feb 17, 2022 | Nov 24, 2021 |
| Redhat_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-pgUpgrade rubygem-io-console-debuginfoUpgrade rubygem-rbsUpgrade rubygem-pg-debugsourceUpgrade ruby-irbUpgrade rubygem-bson-debuginfoUpgrade rubygem-irbNo solution existsUpgrade rubygem-pg-docUpgrade rubygem-did_you_meanUpgrade ruby-docUpgrade rubygem-mysql2Upgrade ruby-default-gemsUpgrade rubygem-rexmlUpgrade rubygem-opensslUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-rssUpgrade rubygem-rakeUpgrade rubygem-psych-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-develUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-bundler-docUpgrade rubygem-bundlerUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-debuginfoUpgrade ruby-libsUpgrade rubygem-bson-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-bson-docUpgrade ruby-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-minitestUpgrade rubygem-test-unitUpgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-json-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-io-consoleUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade rubygem-xmlrpcUpgrade rubygem-net-telnetUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygem-mongo | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-io-console-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-opensslUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-pg-debugsourceUpgrade ruby-develUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubyUpgrade rubygem-io-consoleUpgrade rubygem-pgUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade rubygem-bsonUpgrade ruby-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-openssl-debuginfoUpgrade rubygem-json-debuginfoUpgrade ruby-libsUpgrade rubygem-mysql2 | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5-stdlibUpgrade ruby2.5Upgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5 | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.7Upgrade ruby2.5 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub