CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-bundlerUpgrade rubygem-xmlrpcUpgrade rubygem-irbUpgrade rubygem-rssUpgrade rubygem-rbsUpgrade rubygem-mongo-docUpgrade rubygem-bigdecimalUpgrade rubygem-jsonUpgrade ruby-docUpgrade rubygem-rexmlUpgrade rubygem-mysql2Upgrade rubygem-io-consoleUpgrade rubygem-bsonUpgrade rubyUpgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade ruby-irbUpgrade rubygem-did_you_meanUpgrade rubygem-test-unitUpgrade ruby-develUpgrade rubygem-rakeUpgrade rubygem-power_assertUpgrade rubygem-pg-docUpgrade rubygem-bundler-docUpgrade rubygem-pgUpgrade ruby-default-gemsUpgrade rubygem-abrt-docUpgrade rubygem-mongoUpgrade rubygem-typeprofUpgrade rubygem-bson-docUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade rubygemsUpgrade rubygem-minitestUpgrade rubygems-develUpgrade rubygem-opensslUpgrade ruby-libsUpgrade rubygem-net-telnet | May 4, 2022 | Jan 1, 2022 |
| Alpine Linux | — | Upgrade ruby | Aug 22, 2024 | Jan 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rubygem-rakeUpgrade rubygem-rbsUpgrade rubyUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-test-unitUpgrade ruby-irbUpgrade ruby-default-gemsUpgrade rubygem-rexmlUpgrade rubygem-did_you_meanUpgrade rubygem-bundlerUpgrade rubygem-bigdecimalUpgrade ruby-develUpgrade ruby-debuginfoUpgrade rubygem-irbUpgrade rubygem-rdocUpgrade rubygem-opensslUpgrade rubygem-xmlrpcUpgrade rubygem-power_assertUpgrade rubygems-develUpgrade rubygem-rssUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade ruby-tcltkUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-typeprofUpgrade rubygem-net-telnetUpgrade rubygems | Sep 28, 2023 | Jan 1, 2022 |
| Centos_linux | — | Upgrade rubygem-rexmlUpgrade rubygem-did_you_meanUpgrade rubygem-bsonUpgrade ruby-libsUpgrade rubygem-openssl-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-mongo-docUpgrade ruby-docUpgrade ruby-irbUpgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-bson-docUpgrade rubygem-rssUpgrade rubygem-bigdecimalUpgrade rubygem-pg-debuginfoUpgrade rubygems-develUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade rubygem-bson-debuginfoUpgrade rubygem-xmlrpcUpgrade ruby-debugsourceUpgrade rubygem-io-consoleUpgrade rubygem-mongoUpgrade rubygem-mysql2Upgrade rubygem-abrt-docUpgrade rubygem-mysql2-docUpgrade rubygem-net-telnetUpgrade ruby-develUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bson-debugsourceUpgrade rubygem-abrtUpgrade rubygem-pgUpgrade rubygem-minitestUpgrade rubygem-rbsUpgrade ruby-libs-debuginfoUpgrade rubygem-jsonUpgrade rubygem-bundlerUpgrade rubygem-opensslUpgrade rubyUpgrade rubygemsUpgrade rubygem-psych-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-typeprofUpgrade ruby-default-gemsUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-psychUpgrade rubygem-rdocUpgrade rubygem-pg-docUpgrade rubygem-bundler-docUpgrade rubygem-irbUpgrade rubygem-power_assert | Feb 17, 2022 | Jan 1, 2022 |
| Debian | — | Upgrade ruby2.7 | Dec 28, 2021 | Dec 28, 2021 |
| Freebsd | — | Upgrade rubygem-cgiUpgrade ruby30Upgrade ruby26Upgrade ruby27Upgrade ruby | Nov 4, 2022 | Nov 24, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/ruby. | Jan 25, 2024 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ruby-irbUpgrade ruby-helpUpgrade ruby | Apr 20, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-libs | May 25, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ruby-irbUpgrade ruby-libsUpgrade ruby | Mar 22, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade ruby-libsUpgrade rubyUpgrade ruby-irb | Mar 29, 2022 | Jan 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rubyUpgrade ruby-irbUpgrade ruby-help | Apr 19, 2022 | Jan 1, 2022 |
| Oracle_linux | — | Upgrade rubygem-mysql2-docUpgrade rubygem-abrtUpgrade rubygem-mongo-docUpgrade rubygem-irbUpgrade rubygem-pg-docUpgrade rubygem-rexmlUpgrade rubyUpgrade rubygem-rdocUpgrade rubygem-bundlerUpgrade ruby-default-gemsUpgrade rubygem-did_you_meanUpgrade rubygem-opensslUpgrade ruby-docUpgrade rubygem-xmlrpcUpgrade ruby-irbUpgrade rubygem-rbsUpgrade rubygem-rakeUpgrade rubygem-test-unitUpgrade ruby-develUpgrade rubygem-bsonUpgrade rubygem-bson-docUpgrade rubygem-minitestUpgrade rubygems-develUpgrade rubygem-mongoUpgrade rubygem-pgUpgrade rubygem-typeprofUpgrade rubygem-net-telnetUpgrade rubygem-jsonUpgrade rubygem-mysql2Upgrade rubygem-power_assertUpgrade rubygemsUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade rubygem-bundler-docUpgrade rubygem-bigdecimalUpgrade rubygem-rss | Feb 17, 2022 | Nov 24, 2021 |
| Redhat_linux | — | Upgrade ruby-libsUpgrade rubygem-bundler-docUpgrade rubygem-rssNo solution existsUpgrade rubygem-did_you_meanUpgrade rubygem-rakeUpgrade rubygem-opensslUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rbsUpgrade rubygem-psych-debuginfoUpgrade ruby-develUpgrade rubygem-jsonUpgrade rubyUpgrade ruby-default-gemsUpgrade ruby-irbUpgrade rubygem-mongo-docUpgrade rubygem-mysql2Upgrade rubygem-bundlerUpgrade ruby-docUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-bsonUpgrade rubygem-abrtUpgrade rubygem-pgUpgrade rubygem-mysql2-docUpgrade rubygem-rexmlUpgrade rubygem-bson-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-pg-docUpgrade rubygem-irbUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade ruby-debuginfoUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-xmlrpcUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-net-telnetUpgrade rubygem-io-consoleUpgrade rubygem-bson-docUpgrade rubygem-bson-debugsourceUpgrade rubygem-test-unitUpgrade rubygem-typeprofUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-abrt-docUpgrade rubygem-bigdecimalUpgrade rubygem-openssl-debuginfoUpgrade rubygem-json-debuginfoUpgrade ruby-debugsourceUpgrade rubygems-develUpgrade ruby-libs-debuginfoUpgrade rubygem-mongoUpgrade rubygems | Feb 17, 2022 | Jan 1, 2022 |
| Rocky_linux | — | Upgrade rubygem-json-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-libs-debuginfoUpgrade ruby-debugsourceUpgrade rubygem-psych-debuginfoUpgrade rubygem-openssl-debuginfoUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-mysql2Upgrade rubygem-jsonUpgrade rubygem-bsonUpgrade rubygem-pgUpgrade ruby-debuginfoUpgrade rubygem-bson-debuginfoUpgrade rubygem-io-consoleUpgrade rubygem-opensslUpgrade rubygem-io-console-debuginfoUpgrade rubygem-bigdecimalUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubyUpgrade rubygem-pg-debuginfoUpgrade rubygem-pg-debugsourceUpgrade ruby-develUpgrade rubygem-bson-debugsource | Mar 5, 2024 | Jan 1, 2022 |
| Suse | — | Upgrade ruby2.5-devel-extraUpgrade ruby2.5-docUpgrade ruby2.5-doc-riUpgrade libruby2_5-2_5Upgrade ruby2.5-develUpgrade ruby2.5Upgrade ruby2.5-stdlib | Oct 26, 2022 | Jan 1, 2022 |
| Ubuntu | — | Upgrade ruby2.5Upgrade ruby2.3 (Ubuntu Pro)Upgrade ruby2.7 | Jan 19, 2022 | Jan 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub