Lucene search

CVE-2021-33621

🗓️ 18 Nov 2022 00:00:00Reported by ubuntu.comType

The CGI gem for Ruby before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 allows HTTP response splitting, impacting applications using untrusted user input in HTTP responses or CGI::Cookie creation

Reporter	Title	Published	Views	Family All 77
OpenVAS	Fedora: Security Advisory for ruby (FEDORA-2022-f0f6c6bec2)	9 Dec 202200:00	–	openvas
OpenVAS	Fedora: Security Advisory for ruby (FEDORA-2022-ef96a58bbe)	8 Dec 202200:00	–	openvas
OpenVAS	Fedora: Security Advisory for ruby (FEDORA-2022-b9b710f199)	9 Dec 202200:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-1458)	9 Mar 202300:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-1609)	13 Apr 202300:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-1768)	8 May 202300:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-1483)	9 Mar 202300:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-1790)	8 May 202300:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-2248)	12 Jun 202300:00	–	openvas
OpenVAS	Slackware: Security Advisory (SSA:2022-328-01)	25 Nov 202200:00	–	openvas

Source	Link
ruby-lang	www.ruby-lang.org/en/news/2022/11/22/http-response-splitting-in-cgi-cve-2021-33621/
github	www.github.com/ruby/cgi/commit/64c5045c0a6b84fdb938a8465a0890e5f7162708
github	www.github.com/ruby/cgi/commit/b46d41c36380e04f6388970b5ef05c687f4d1819
ubuntu	www.ubuntu.com/security/notices/USN-5806-1
ubuntu	www.ubuntu.com/security/notices/USN-5806-2
ubuntu	www.ubuntu.com/security/notices/USN-5806-3
ubuntu	www.ubuntu.com/security/notices/USN-6181-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-33621
launchpad	www.launchpad.net/bugs/cve/CVE-2021-33621

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	jruby	any	UNKNOWN
ubuntu	20.04	noarch	jruby	any	UNKNOWN
ubuntu	24.04	noarch	jruby	any	UNKNOWN
ubuntu	14.04	noarch	jruby	any	UNKNOWN
ubuntu	16.04	noarch	jruby	any	UNKNOWN
ubuntu	16.04	noarch	ruby2.3	2.3.1-2~ubuntu16.04.16+esm4	UNKNOWN
ubuntu	18.04	noarch	ruby2.5	2.5.1-1ubuntu1.13	UNKNOWN
ubuntu	20.04	noarch	ruby2.7	2.7.0-5ubuntu1.8	UNKNOWN
ubuntu	22.04	noarch	ruby3.0	3.0.2-7ubuntu2.3	UNKNOWN
ubuntu	22.10	noarch	ruby3.0	3.0.4-7ubuntu0.1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Nov 2022 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS38.8

EPSS0.005