Vulnerability Database

296,147

Total vulnerabilities in the database

CVE-2021-33621

The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
ruby-lang / cgi 0.2.0 0.2.2
ruby-lang / cgi - 0.1.0.2
ruby-lang / cgi 0.3.0 0.3.5
fedoraproject / fedora 35 35.x
fedoraproject / fedora 36 36.x
fedoraproject / fedora 37 37.x
Ruby icon cgi 0.3.0 0.3.5
Ruby icon cgi 0.2.0 0.2.2
Ruby icon cgi - 0.1.0.2
ruby-lang / ruby 3.1.0 3.1.3
ruby-lang / ruby 3.0.0 3.0.5
ruby-lang / ruby 2.7.0 2.7.7