CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bson-docUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-psychUpgrade rubygem-typeprofUpgrade rubygem-abrt-docUpgrade ruby-libsUpgrade rubygem-minitestUpgrade rubygems-develUpgrade rubygemsUpgrade rubygem-pgUpgrade rubygem-mongoUpgrade rubygem-opensslUpgrade rubygem-bundler-docUpgrade rubygem-pg-docUpgrade rubygem-rdocUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-abrtUpgrade rubyUpgrade rubygem-mysql2Upgrade rubygem-mysql2-docUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubygem-bsonUpgrade rubygem-rssUpgrade rubygem-did_you_meanUpgrade rubygem-rexmlUpgrade ruby-develUpgrade rubygem-test-unitUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-mongo-docUpgrade rubygem-rbsUpgrade rubygem-xmlrpcUpgrade rubygem-jsonUpgrade ruby-doc | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-test-unitUpgrade rubygem-xmlrpcUpgrade rubygem-rexmlUpgrade ruby-debuginfoUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubygem-rbsUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubyUpgrade rubygem-bundlerUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-did_you_meanUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubygems-develUpgrade rubygem-power_assertUpgrade rubygem-psychUpgrade rubygem-jsonUpgrade rubygem-minitestUpgrade ruby-tcltkUpgrade ruby-libsUpgrade rubygem-net-telnetUpgrade rubygem-rssUpgrade rubygemsUpgrade rubygem-typeprof | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-xmlrpcUpgrade rubygem-rssUpgrade rubygem-bson-debuginfoUpgrade rubygem-test-unitUpgrade ruby-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-io-consoleUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-rakeUpgrade rubygem-mongo-docUpgrade ruby-docUpgrade rubygem-openssl-debuginfoUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade rubygems-develUpgrade rubygem-bsonUpgrade ruby-libsUpgrade rubygem-rexmlUpgrade ruby-default-gemsUpgrade rubygem-net-telnetUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrtUpgrade rubygem-rdocUpgrade ruby-libs-debuginfoUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade rubyUpgrade rubygem-rbsUpgrade rubygem-opensslUpgrade rubygem-mysql2-docUpgrade rubygem-minitestUpgrade rubygem-abrt-docUpgrade rubygem-power_assertUpgrade rubygem-pg-debugsourceUpgrade rubygem-mongoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-typeprofUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygemsUpgrade rubygem-pg-docUpgrade rubygem-irbUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-bundler-docUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade rubygem-bundler | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade rubygem-cgiUpgrade ruby30Upgrade ruby26Upgrade ruby27Upgrade ruby | Nov 4, 2022 | Nov 24, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | May 25, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Mar 22, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-jsonUpgrade rubygem-rssUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygems-develUpgrade rubygem-mongoUpgrade rubygem-bigdecimalUpgrade rubygem-typeprofUpgrade ruby-libsUpgrade rubygem-pgUpgrade rubygemsUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-bundler-docUpgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade rubygem-mysql2Upgrade rubygem-bson-docUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade ruby-docUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade rubyUpgrade rubygem-bundlerUpgrade rubygem-mongo-docUpgrade rubygem-test-unitUpgrade rubygem-rakeUpgrade ruby-develUpgrade rubygem-abrtUpgrade rubygem-rdocUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade ruby-default-gemsUpgrade rubygem-rexmlUpgrade rubygem-openssl | Feb 17, 2022 | Nov 24, 2021 |
| Redhat_linux | — | Upgrade rubygem-openssl-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-bigdecimalUpgrade rubygem-xmlrpcUpgrade ruby-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-io-consoleUpgrade rubygem-bson-debugsourceUpgrade rubygem-minitestUpgrade rubygem-test-unitUpgrade rubygem-mongoUpgrade rubygem-rdocUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-bson-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libs-debuginfoNo solution existsUpgrade rubygem-pg-debugsourceUpgrade rubygem-rakeUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-opensslUpgrade rubygem-jsonUpgrade ruby-irbUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-rssUpgrade rubygem-rexmlUpgrade rubygem-pg-docUpgrade rubygem-pgUpgrade rubygem-irbUpgrade rubygem-mongo-docUpgrade rubygem-psych-debuginfoUpgrade ruby-libsUpgrade rubygem-rbsUpgrade rubygem-bundler-docUpgrade ruby-default-gemsUpgrade ruby-develUpgrade rubyUpgrade rubygem-abrtUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-mysql2 | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-bson-debugsourceUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-opensslUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubyUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade rubygem-bson-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-debugsourceUpgrade ruby-libs-debuginfoUpgrade rubygem-psychUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-mysql2Upgrade ruby-libsUpgrade rubygem-psych-debuginfoUpgrade rubygem-jsonUpgrade rubygem-bsonUpgrade ruby-debuginfoUpgrade rubygem-pgUpgrade rubygem-json-debuginfo | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade ruby2.5-stdlibUpgrade ruby2.5Upgrade ruby2.5-devel | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.7Upgrade ruby2.5 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub