CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-minitestUpgrade rubygemsUpgrade rubygem-bson-docUpgrade rubygem-psychUpgrade rubygem-bundler-docUpgrade ruby-libsUpgrade rubygem-power_assertUpgrade rubygem-net-telnetUpgrade rubygem-pgUpgrade ruby-default-gemsUpgrade rubygem-opensslUpgrade rubygem-typeprofUpgrade rubygem-pg-docUpgrade rubygem-abrt-docUpgrade rubygem-mongoUpgrade rubygem-rdocUpgrade rubygems-develUpgrade rubygem-xmlrpcUpgrade rubygem-test-unitUpgrade rubygem-mysql2Upgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-mysql2-docUpgrade rubygem-bundlerUpgrade rubygem-rbsUpgrade ruby-develUpgrade rubyUpgrade rubygem-rssUpgrade rubygem-rakeUpgrade rubygem-bigdecimalUpgrade rubygem-abrtUpgrade rubygem-irbUpgrade rubygem-jsonUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade rubygem-rexml | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-jsonUpgrade rubygem-minitestUpgrade rubygem-psychUpgrade ruby-tcltkUpgrade rubygem-typeprofUpgrade ruby-libsUpgrade rubygemsUpgrade rubygem-power_assertUpgrade rubygem-rssUpgrade rubygem-net-telnetUpgrade rubygems-develUpgrade rubygem-rakeUpgrade ruby-irbUpgrade rubyUpgrade ruby-default-gemsUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubygem-io-consoleUpgrade rubygem-rdocUpgrade rubygem-did_you_meanUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade ruby-docUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade rubygem-xmlrpcUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-bigdecimal | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-abrt-docUpgrade rubygem-minitestUpgrade rubygem-mongoUpgrade rubygem-power_assertUpgrade rubygem-pg-debugsourceUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-net-telnetUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade rubygem-rbsUpgrade ruby-default-gemsUpgrade rubygem-bundler-docUpgrade rubygem-jsonUpgrade rubygem-irbUpgrade rubygem-typeprofUpgrade rubygem-psych-debuginfoUpgrade rubyUpgrade rubygem-pg-docUpgrade rubygem-bundlerUpgrade rubygem-pgUpgrade rubygem-opensslUpgrade rubygemsUpgrade rubygem-abrtUpgrade rubygem-mysql2Upgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-psychUpgrade rubygem-rdocUpgrade ruby-libs-debuginfoUpgrade ruby-debugsourceUpgrade ruby-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-rssUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfoUpgrade rubygem-bson-docUpgrade rubygems-develUpgrade rubygem-rakeUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade ruby-irbUpgrade ruby-docUpgrade rubygem-mongo-docUpgrade rubygem-test-unitUpgrade rubygem-bson-debuginfoUpgrade ruby-libsUpgrade rubygem-bsonUpgrade rubygem-rexmlUpgrade rubygem-xmlrpc | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade rubygem-cgiUpgrade ruby30Upgrade ruby26Upgrade rubyUpgrade ruby27 | Nov 4, 2022 | Nov 24, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | May 25, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-libsUpgrade ruby-irbUpgrade ruby | Mar 22, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-power_assertUpgrade rubygem-psychUpgrade rubygem-pgUpgrade rubygem-typeprofUpgrade ruby-libsUpgrade rubygem-bundler-docUpgrade rubygem-io-consoleUpgrade rubygem-bigdecimalUpgrade rubygemsUpgrade rubygem-mongoUpgrade rubygem-abrt-docUpgrade rubygems-develUpgrade rubygem-bsonUpgrade rubygem-net-telnetUpgrade rubygem-jsonUpgrade rubygem-rssUpgrade rubygem-bson-docUpgrade rubygem-minitestUpgrade rubygem-mysql2Upgrade rubygem-did_you_meanUpgrade rubygem-rakeUpgrade rubygem-rexmlUpgrade rubygem-test-unitUpgrade ruby-develUpgrade rubygem-abrtUpgrade rubygem-opensslUpgrade rubygem-bundlerUpgrade rubygem-irbUpgrade rubygem-rbsUpgrade rubygem-mongo-docUpgrade rubygem-pg-docUpgrade ruby-default-gemsUpgrade rubygem-rdocUpgrade rubygem-mysql2-docUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-xmlrpcUpgrade ruby | Feb 17, 2022 | Nov 24, 2021 |
| Redhat_linux | — | Upgrade rubyUpgrade rubygem-bsonUpgrade rubygem-pg-docUpgrade rubygem-opensslUpgrade rubygem-io-console-debuginfoUpgrade rubygem-did_you_meanUpgrade rubygem-rakeUpgrade rubygem-pgUpgrade ruby-docNo solution existsUpgrade rubygem-rssUpgrade rubygem-jsonUpgrade ruby-default-gemsUpgrade rubygem-mysql2Upgrade rubygem-mongo-docUpgrade rubygem-rexmlUpgrade rubygem-pg-debuginfoUpgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-bson-debuginfoUpgrade rubygem-irbUpgrade ruby-develUpgrade rubygem-bundler-docUpgrade ruby-irbUpgrade rubygem-psych-debuginfoUpgrade ruby-libsUpgrade rubygem-rbsUpgrade rubygem-pg-debugsourceUpgrade rubygem-bundlerUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-power_assertUpgrade ruby-libs-debuginfoUpgrade rubygem-mongoUpgrade rubygem-mysql2-debugsourceUpgrade rubygemsUpgrade rubygem-openssl-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-rdocUpgrade ruby-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-test-unitUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-xmlrpcUpgrade rubygem-bson-docUpgrade ruby-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-io-consoleUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-json-debuginfoUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygem-minitest | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-bson-debuginfoUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-io-consoleUpgrade rubygem-pg-debugsourceUpgrade rubygem-bson-debugsourceUpgrade rubygem-opensslUpgrade ruby-develUpgrade rubygem-bigdecimal-debuginfoUpgrade rubyUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bsonUpgrade ruby-debugsourceUpgrade rubygem-pgUpgrade rubygem-jsonUpgrade ruby-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-openssl-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-json-debuginfoUpgrade ruby-libsUpgrade rubygem-psych | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade libruby2_5-2_5Upgrade ruby2.5-doc-riUpgrade ruby2.5-devel-extraUpgrade ruby2.5-docUpgrade ruby2.5Upgrade ruby2.5-stdlibUpgrade ruby2.5-devel | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.7 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub