CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-rubyalma-upgrade-ruby-default-gemsalma-upgrade-ruby-develalma-upgrade-ruby-docalma-upgrade-ruby-irbalma-upgrade-ruby-libsalma-upgrade-rubygem-abrtalma-upgrade-rubygem-abrt-docalma-upgrade-rubygem-bigdecimalalma-upgrade-rubygem-bsonalma-upgrade-rubygem-bson-docalma-upgrade-rubygem-bundleralma-upgrade-rubygem-bundler-docalma-upgrade-rubygem-did_you_meanalma-upgrade-rubygem-io-consolealma-upgrade-rubygem-irbalma-upgrade-rubygem-jsonalma-upgrade-rubygem-minitestalma-upgrade-rubygem-mongoalma-upgrade-rubygem-mongo-docalma-upgrade-rubygem-mysql2alma-upgrade-rubygem-mysql2-docalma-upgrade-rubygem-net-telnetalma-upgrade-rubygem-opensslalma-upgrade-rubygem-pgalma-upgrade-rubygem-pg-docalma-upgrade-rubygem-power_assertalma-upgrade-rubygem-psychalma-upgrade-rubygem-rakealma-upgrade-rubygem-rbsalma-upgrade-rubygem-rdocalma-upgrade-rubygem-rexmlalma-upgrade-rubygem-rssalma-upgrade-rubygem-test-unitalma-upgrade-rubygem-typeprofalma-upgrade-rubygem-xmlrpcalma-upgrade-rubygemsalma-upgrade-rubygems-devel | May 4, 2022 | Jan 1, 2022 | |
| Alpine Linux | alpine-linux-upgrade-ruby | Aug 22, 2024 | Jan 1, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-rubyamazon-linux-ami-2-upgrade-ruby-debuginfoamazon-linux-ami-2-upgrade-ruby-default-gemsamazon-linux-ami-2-upgrade-ruby-develamazon-linux-ami-2-upgrade-ruby-docamazon-linux-ami-2-upgrade-ruby-irbamazon-linux-ami-2-upgrade-ruby-libsamazon-linux-ami-2-upgrade-ruby-tcltkamazon-linux-ami-2-upgrade-rubygem-bigdecimalamazon-linux-ami-2-upgrade-rubygem-bundleramazon-linux-ami-2-upgrade-rubygem-did_you_meanamazon-linux-ami-2-upgrade-rubygem-io-consoleamazon-linux-ami-2-upgrade-rubygem-irbamazon-linux-ami-2-upgrade-rubygem-jsonamazon-linux-ami-2-upgrade-rubygem-minitestamazon-linux-ami-2-upgrade-rubygem-net-telnetamazon-linux-ami-2-upgrade-rubygem-opensslamazon-linux-ami-2-upgrade-rubygem-power_assertamazon-linux-ami-2-upgrade-rubygem-psychamazon-linux-ami-2-upgrade-rubygem-rakeamazon-linux-ami-2-upgrade-rubygem-rbsamazon-linux-ami-2-upgrade-rubygem-rdocamazon-linux-ami-2-upgrade-rubygem-rexmlamazon-linux-ami-2-upgrade-rubygem-rssamazon-linux-ami-2-upgrade-rubygem-test-unitamazon-linux-ami-2-upgrade-rubygem-typeprofamazon-linux-ami-2-upgrade-rubygem-xmlrpcamazon-linux-ami-2-upgrade-rubygemsamazon-linux-ami-2-upgrade-rubygems-devel | Sep 28, 2023 | Jan 1, 2022 | |
| Centos_linux | — | centos-upgrade-rubycentos-upgrade-ruby-debuginfocentos-upgrade-ruby-debugsourcecentos-upgrade-ruby-default-gemscentos-upgrade-ruby-develcentos-upgrade-ruby-doccentos-upgrade-ruby-irbcentos-upgrade-ruby-libscentos-upgrade-ruby-libs-debuginfocentos-upgrade-rubygem-abrtcentos-upgrade-rubygem-abrt-doccentos-upgrade-rubygem-bigdecimalcentos-upgrade-rubygem-bigdecimal-debuginfocentos-upgrade-rubygem-bsoncentos-upgrade-rubygem-bson-debuginfocentos-upgrade-rubygem-bson-debugsourcecentos-upgrade-rubygem-bson-doccentos-upgrade-rubygem-bundlercentos-upgrade-rubygem-bundler-doccentos-upgrade-rubygem-did_you_meancentos-upgrade-rubygem-io-consolecentos-upgrade-rubygem-io-console-debuginfocentos-upgrade-rubygem-irbcentos-upgrade-rubygem-jsoncentos-upgrade-rubygem-json-debuginfocentos-upgrade-rubygem-minitestcentos-upgrade-rubygem-mongocentos-upgrade-rubygem-mongo-doccentos-upgrade-rubygem-mysql2centos-upgrade-rubygem-mysql2-debuginfocentos-upgrade-rubygem-mysql2-debugsourcecentos-upgrade-rubygem-mysql2-doccentos-upgrade-rubygem-net-telnetcentos-upgrade-rubygem-opensslcentos-upgrade-rubygem-openssl-debuginfocentos-upgrade-rubygem-pgcentos-upgrade-rubygem-pg-debuginfocentos-upgrade-rubygem-pg-debugsourcecentos-upgrade-rubygem-pg-doccentos-upgrade-rubygem-power_assertcentos-upgrade-rubygem-psychcentos-upgrade-rubygem-psych-debuginfocentos-upgrade-rubygem-rakecentos-upgrade-rubygem-rbscentos-upgrade-rubygem-rdoccentos-upgrade-rubygem-rexmlcentos-upgrade-rubygem-rsscentos-upgrade-rubygem-test-unitcentos-upgrade-rubygem-typeprofcentos-upgrade-rubygem-xmlrpccentos-upgrade-rubygemscentos-upgrade-rubygems-devel | Feb 17, 2022 | Jan 1, 2022 |
| Debian | debian-upgrade-ruby2-7 | Dec 28, 2021 | Dec 28, 2021 | |
| Freebsd | freebsd-upgrade-package-rubyfreebsd-upgrade-package-ruby26freebsd-upgrade-package-ruby27freebsd-upgrade-package-ruby30freebsd-upgrade-package-rubygem-cgi | Nov 4, 2022 | Nov 24, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-ruby | Jan 25, 2024 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-rubyhuawei-euleros-2_0_sp10-upgrade-ruby-helphuawei-euleros-2_0_sp10-upgrade-ruby-irb | Apr 20, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-rubyhuawei-euleros-2_0_sp3-upgrade-ruby-irbhuawei-euleros-2_0_sp3-upgrade-ruby-libs | May 25, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-rubyhuawei-euleros-2_0_sp5-upgrade-ruby-irbhuawei-euleros-2_0_sp5-upgrade-ruby-libs | Mar 22, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-rubyhuawei-euleros-2_0_sp8-upgrade-ruby-irbhuawei-euleros-2_0_sp8-upgrade-ruby-libs | Mar 29, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-rubyhuawei-euleros-2_0_sp9-upgrade-ruby-helphuawei-euleros-2_0_sp9-upgrade-ruby-irb | Apr 19, 2022 | Jan 1, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-rubyoracle-linux-upgrade-ruby-default-gemsoracle-linux-upgrade-ruby-develoracle-linux-upgrade-ruby-docoracle-linux-upgrade-rubygem-abrtoracle-linux-upgrade-rubygem-abrt-docoracle-linux-upgrade-rubygem-bigdecimaloracle-linux-upgrade-rubygem-bsonoracle-linux-upgrade-rubygem-bson-docoracle-linux-upgrade-rubygem-bundleroracle-linux-upgrade-rubygem-bundler-docoracle-linux-upgrade-rubygem-did-you-meanoracle-linux-upgrade-rubygem-io-consoleoracle-linux-upgrade-rubygem-irboracle-linux-upgrade-rubygem-jsonoracle-linux-upgrade-rubygem-minitestoracle-linux-upgrade-rubygem-mongooracle-linux-upgrade-rubygem-mongo-docoracle-linux-upgrade-rubygem-mysql2oracle-linux-upgrade-rubygem-mysql2-docoracle-linux-upgrade-rubygem-net-telnetoracle-linux-upgrade-rubygem-openssloracle-linux-upgrade-rubygem-pgoracle-linux-upgrade-rubygem-pg-docoracle-linux-upgrade-rubygem-power-assertoracle-linux-upgrade-rubygem-psychoracle-linux-upgrade-rubygem-rakeoracle-linux-upgrade-rubygem-rbsoracle-linux-upgrade-rubygem-rdocoracle-linux-upgrade-rubygem-rexmloracle-linux-upgrade-rubygem-rssoracle-linux-upgrade-rubygemsoracle-linux-upgrade-rubygems-develoracle-linux-upgrade-rubygem-test-unitoracle-linux-upgrade-rubygem-typeproforacle-linux-upgrade-rubygem-xmlrpcoracle-linux-upgrade-ruby-irboracle-linux-upgrade-ruby-libs | Feb 17, 2022 | Nov 24, 2021 |
| Redhat_linux | redhat-upgrade-rubyredhat-upgrade-ruby-debuginforedhat-upgrade-ruby-debugsourceredhat-upgrade-ruby-default-gemsredhat-upgrade-ruby-develredhat-upgrade-ruby-docredhat-upgrade-ruby-irbredhat-upgrade-ruby-libsredhat-upgrade-ruby-libs-debuginforedhat-upgrade-rubygem-abrtredhat-upgrade-rubygem-abrt-docredhat-upgrade-rubygem-bigdecimalredhat-upgrade-rubygem-bigdecimal-debuginforedhat-upgrade-rubygem-bsonredhat-upgrade-rubygem-bson-debuginforedhat-upgrade-rubygem-bson-debugsourceredhat-upgrade-rubygem-bson-docredhat-upgrade-rubygem-bundlerredhat-upgrade-rubygem-bundler-docredhat-upgrade-rubygem-did_you_meanredhat-upgrade-rubygem-io-consoleredhat-upgrade-rubygem-io-console-debuginforedhat-upgrade-rubygem-irbredhat-upgrade-rubygem-jsonredhat-upgrade-rubygem-json-debuginforedhat-upgrade-rubygem-minitestredhat-upgrade-rubygem-mongoredhat-upgrade-rubygem-mongo-docredhat-upgrade-rubygem-mysql2redhat-upgrade-rubygem-mysql2-debuginforedhat-upgrade-rubygem-mysql2-debugsourceredhat-upgrade-rubygem-mysql2-docredhat-upgrade-rubygem-net-telnetredhat-upgrade-rubygem-opensslredhat-upgrade-rubygem-openssl-debuginforedhat-upgrade-rubygem-pgredhat-upgrade-rubygem-pg-debuginforedhat-upgrade-rubygem-pg-debugsourceredhat-upgrade-rubygem-pg-docredhat-upgrade-rubygem-power_assertredhat-upgrade-rubygem-psychredhat-upgrade-rubygem-psych-debuginforedhat-upgrade-rubygem-rakeredhat-upgrade-rubygem-rbsredhat-upgrade-rubygem-rdocredhat-upgrade-rubygem-rexmlredhat-upgrade-rubygem-rssredhat-upgrade-rubygem-test-unitredhat-upgrade-rubygem-typeprofredhat-upgrade-rubygem-xmlrpcredhat-upgrade-rubygemsredhat-upgrade-rubygems-devel | Feb 17, 2022 | Jan 1, 2022 | |
| Rocky_linux | rocky-upgrade-rubyrocky-upgrade-ruby-debuginforocky-upgrade-ruby-debugsourcerocky-upgrade-ruby-develrocky-upgrade-ruby-libsrocky-upgrade-ruby-libs-debuginforocky-upgrade-rubygem-bigdecimalrocky-upgrade-rubygem-bigdecimal-debuginforocky-upgrade-rubygem-bsonrocky-upgrade-rubygem-bson-debuginforocky-upgrade-rubygem-bson-debugsourcerocky-upgrade-rubygem-io-consolerocky-upgrade-rubygem-io-console-debuginforocky-upgrade-rubygem-jsonrocky-upgrade-rubygem-json-debuginforocky-upgrade-rubygem-mysql2rocky-upgrade-rubygem-mysql2-debuginforocky-upgrade-rubygem-mysql2-debugsourcerocky-upgrade-rubygem-opensslrocky-upgrade-rubygem-openssl-debuginforocky-upgrade-rubygem-pgrocky-upgrade-rubygem-pg-debuginforocky-upgrade-rubygem-pg-debugsourcerocky-upgrade-rubygem-psychrocky-upgrade-rubygem-psych-debuginfo | Mar 5, 2024 | Jan 1, 2022 | |
| Suse | — | suse-upgrade-libruby2_5-2_5suse-upgrade-ruby2-5suse-upgrade-ruby2-5-develsuse-upgrade-ruby2-5-devel-extrasuse-upgrade-ruby2-5-docsuse-upgrade-ruby2-5-doc-risuse-upgrade-ruby2-5-stdlib | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | ubuntu-pro-upgrade-ruby2-3ubuntu-upgrade-ruby2-5ubuntu-upgrade-ruby2-7 | Jan 19, 2022 | Jan 1, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub