Vulnetix
Try Vulnetix Request Demo
BIT-ruby-2021-33621 PUBLISHED CVSS 8.800000190734863 HIGH

The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.

Risk Scores

CVSS v3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Bitnamiruby2.7.0, 3.0.0, 3.1.0

Timeline

References

Open in Interactive Console →