CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-io-consoleUpgrade rubyUpgrade rubygem-abrtUpgrade rubygem-bundlerUpgrade rubygem-mysql2-docUpgrade rubygem-rexmlUpgrade rubygem-bsonUpgrade ruby-irbUpgrade rubygem-irbUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2Upgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade rubygem-rbsUpgrade rubygem-rssUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-jsonUpgrade rubygem-bson-docUpgrade rubygem-net-telnetUpgrade ruby-libsUpgrade rubygem-rdocUpgrade rubygem-mongoUpgrade rubygem-pgUpgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-bundler-docUpgrade rubygem-opensslUpgrade ruby-default-gemsUpgrade rubygem-typeprofUpgrade rubygems-develUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygems | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rexmlUpgrade rubyUpgrade rubygem-did_you_meanUpgrade rubygem-xmlrpcUpgrade rubygem-opensslUpgrade rubygem-rakeUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-bigdecimalUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-rdocUpgrade ruby-debuginfoUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygemsUpgrade rubygems-develUpgrade ruby-libsUpgrade rubygem-typeprofUpgrade rubygem-jsonUpgrade rubygem-psychUpgrade ruby-tcltkUpgrade rubygem-minitestUpgrade rubygem-rss | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrtUpgrade ruby-develUpgrade rubygem-minitestUpgrade rubygem-abrt-docUpgrade rubygem-net-telnetUpgrade rubygem-jsonUpgrade rubygem-pgUpgrade rubyUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-mysql2Upgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-psychUpgrade rubygem-typeprofUpgrade ruby-libs-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-rbsUpgrade rubygem-psych-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-opensslUpgrade rubygem-pg-docUpgrade rubygem-irbUpgrade rubygem-bson-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-xmlrpcUpgrade ruby-libsUpgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubygems-develUpgrade rubygem-rssUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-docUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-did_you_meanUpgrade ruby-irbUpgrade ruby-docUpgrade ruby-debuginfoUpgrade rubygem-openssl-debuginfo | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade ruby26Upgrade rubygem-cgiUpgrade ruby30Upgrade ruby27Upgrade ruby | Nov 4, 2022 | Nov 24, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-helpUpgrade rubyUpgrade ruby-irb | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | May 25, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Mar 22, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade rubyUpgrade ruby-libs | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygem-psychUpgrade rubygem-bundler-docUpgrade rubygem-net-telnetUpgrade rubygem-mysql2Upgrade rubygem-abrt-docUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-rssUpgrade rubygem-power_assertUpgrade rubygem-pgUpgrade rubygem-bsonUpgrade rubygemsUpgrade ruby-libsUpgrade rubygem-bson-docUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade rubygem-mongoUpgrade rubygem-rexmlUpgrade rubygem-rdocUpgrade rubygem-mysql2-docUpgrade rubygem-pg-docUpgrade rubygem-rakeUpgrade ruby-develUpgrade rubygem-irbUpgrade rubygem-xmlrpcUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-test-unitUpgrade rubygem-mongo-docUpgrade rubygem-did_you_meanUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade rubyUpgrade rubygem-opensslUpgrade rubygem-abrtUpgrade ruby-default-gems | Feb 17, 2022 | Nov 24, 2021 |
| Redhat_linux | — | Upgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-irbUpgrade rubygem-mysql2-docUpgrade rubygem-bson-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-pgUpgrade rubygem-pg-debugsourceUpgrade rubygem-irbUpgrade rubygem-psych-debuginfoUpgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-did_you_meanUpgrade rubygem-rbsUpgrade rubygem-mysql2-debuginfoUpgrade ruby-libsUpgrade rubygem-abrtUpgrade rubygem-bundler-docNo solution existsUpgrade rubygem-bsonUpgrade rubygem-jsonUpgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade rubygem-pg-docUpgrade rubygem-rakeUpgrade rubygem-rssUpgrade rubyUpgrade ruby-develUpgrade ruby-default-gemsUpgrade rubygem-rexmlUpgrade rubygem-typeprofUpgrade rubygem-bson-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-io-consoleUpgrade rubygem-json-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-openssl-debuginfoUpgrade rubygem-minitestUpgrade rubygem-net-telnetUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-test-unitUpgrade rubygem-rdocUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-abrt-docUpgrade ruby-libs-debuginfoUpgrade rubygemsUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade rubygem-psychUpgrade ruby-debugsource | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-json-debuginfoUpgrade rubygem-psychUpgrade ruby-libsUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade ruby-libs-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-psych-debuginfoUpgrade ruby-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bsonUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-io-consoleUpgrade rubyUpgrade rubygem-opensslUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-bson-debuginfoUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade rubygem-bigdecimal-debuginfo | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade ruby2.5-docUpgrade libruby2_5-2_5Upgrade ruby2.5Upgrade ruby2.5-develUpgrade ruby2.5-stdlib | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.7Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.5 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub