CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-minitestUpgrade rubygemsUpgrade rubygems-develUpgrade rubygem-mongoUpgrade ruby-libsUpgrade rubygem-opensslUpgrade rubygem-pgUpgrade rubygem-bson-docUpgrade rubygem-typeprofUpgrade rubygem-net-telnetUpgrade rubygem-abrt-docUpgrade ruby-default-gemsUpgrade rubygem-psychUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-bundler-docUpgrade rubygem-rdocUpgrade rubygem-rbsUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-rakeUpgrade ruby-develUpgrade rubygem-bsonUpgrade rubygem-mysql2-docUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-io-consoleUpgrade rubygem-abrtUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubyUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubygem-did_you_meanUpgrade rubygem-rss | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rbsUpgrade rubygem-did_you_meanUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubyUpgrade ruby-irbUpgrade rubygem-opensslUpgrade ruby-develUpgrade rubygem-rdocUpgrade rubygem-rexmlUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-test-unitUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-irbUpgrade rubygem-rakeUpgrade ruby-tcltkUpgrade ruby-libsUpgrade rubygem-jsonUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygems-develUpgrade rubygem-rssUpgrade rubygem-power_assertUpgrade rubygem-typeprofUpgrade rubygem-minitestUpgrade rubygem-psych | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-rakeUpgrade rubygem-bsonUpgrade rubygem-did_you_meanUpgrade ruby-libsUpgrade rubygem-rexmlUpgrade rubygem-bson-docUpgrade rubygem-json-debuginfoUpgrade rubygems-develUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-test-unitUpgrade rubygem-bson-debuginfoUpgrade rubygem-rssUpgrade rubygem-openssl-debuginfoUpgrade rubygem-mongo-docUpgrade ruby-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debuginfoUpgrade ruby-debuginfoUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-minitestUpgrade rubygem-abrt-docUpgrade rubygem-psych-debuginfoUpgrade rubygem-typeprofUpgrade rubygemsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-rdocUpgrade rubygem-pg-docUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade rubygem-pgUpgrade rubyUpgrade ruby-develUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrtUpgrade rubygem-net-telnetUpgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade rubygem-power_assertUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade rubygem-mongoUpgrade rubygem-rbsUpgrade ruby-libs-debuginfoUpgrade rubygem-bundler-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-psychUpgrade ruby-default-gemsUpgrade rubygem-mysql2-doc | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade ruby30Upgrade ruby26Upgrade rubygem-cgiUpgrade rubyUpgrade ruby27 | Nov 4, 2022 | Nov 24, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | May 25, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rubyUpgrade ruby-libsUpgrade ruby-irb | Mar 22, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-helpUpgrade ruby-irbUpgrade ruby | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-did_you_meanUpgrade rubygem-rbsUpgrade ruby-docUpgrade rubygem-pg-docUpgrade rubygem-mysql2-docUpgrade ruby-default-gemsUpgrade rubyUpgrade rubygem-rexmlUpgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade rubygem-rakeUpgrade rubygem-mongo-docUpgrade rubygem-test-unitUpgrade ruby-develUpgrade rubygem-opensslUpgrade rubygem-irbUpgrade ruby-irbUpgrade rubygem-abrtUpgrade rubygem-xmlrpcUpgrade rubygem-mongoUpgrade rubygems-develUpgrade rubygem-net-telnetUpgrade rubygem-jsonUpgrade rubygem-rssUpgrade rubygem-psychUpgrade rubygem-pgUpgrade ruby-libsUpgrade rubygem-typeprofUpgrade rubygem-abrt-docUpgrade rubygem-bson-docUpgrade rubygem-bsonUpgrade rubygem-minitestUpgrade rubygem-mysql2Upgrade rubygemsUpgrade rubygem-power_assertUpgrade rubygem-io-consoleUpgrade rubygem-bundler-docUpgrade rubygem-bigdecimal | Feb 17, 2022 | Nov 24, 2021 |
| Redhat_linux | — | Upgrade rubygem-mysql2-debuginfoUpgrade rubygem-abrtUpgrade rubygem-bundler-docUpgrade ruby-docUpgrade rubygem-bundlerUpgrade rubygem-rssUpgrade rubygem-did_you_meanUpgrade rubygem-bson-debuginfoUpgrade ruby-irbUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade rubygem-opensslUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-rbsUpgrade rubygem-pgUpgrade ruby-libsUpgrade rubygem-pg-debugsourceUpgrade rubygem-irbUpgrade rubygem-pg-docUpgrade rubygem-pg-debuginfoUpgrade rubyUpgrade ruby-develUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-docNo solution existsUpgrade rubygem-bsonUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-xmlrpcUpgrade rubygem-abrt-docUpgrade rubygem-psychUpgrade rubygemsUpgrade ruby-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-mongoUpgrade rubygem-rdocUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-bson-debugsourceUpgrade rubygems-develUpgrade rubygem-json-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-typeprofUpgrade rubygem-bigdecimalUpgrade rubygem-minitestUpgrade rubygem-test-unitUpgrade rubygem-net-telnet | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-bson-debuginfoUpgrade rubygem-opensslUpgrade rubygem-io-consoleUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubyUpgrade rubygem-bsonUpgrade ruby-debuginfoUpgrade rubygem-json-debuginfoUpgrade ruby-libsUpgrade rubygem-mysql2Upgrade rubygem-psychUpgrade rubygem-openssl-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-jsonUpgrade rubygem-pgUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libs-debuginfo | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-stdlibUpgrade ruby2.5-devel-extraUpgrade libruby2_5-2_5Upgrade ruby2.5-docUpgrade ruby2.5-doc-ri | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.7 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub