Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2021-33621 — HIGH severity vulnerability | Release Alert

CVE-2021-33621

8.8

HIGHCVSS v3

Published

November 18, 2022

Affected

13 projects

Assigned by

MITRE

Severity scale

010

Description

The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting. This is relevant to applications that use untrusted user input either to generate an HTTP response or to create a CGI::Cookie object.

Ruby

ChocolateyRuby is a dynamic, open source programming language focusing on simplicity and productivity. It has an elegant syntax that is natural to read and easy to write. This package provides a self-contained [Windows-based installer](https://rubyinstaller.org) that includes the Ruby language, an execution environment, important documentation, and more. ## Package Parameters - `/InstallDir` - Ruby installation directory, by default `c:\tools\RubyXY` where XY are major and minor version parts. - `/NoPath` - Do not add ruby bin folder to machine PATH. Example: `choco install ruby --package-parameters="'/NoPath ""/InstallDir:C:\your\install\path""'"` ## Notes - To install ruby development kit ruby installer provides `ridk` command. It provides an easy way to install msys2 via `ridk install 1`, however, the installation is interactive. To accomplish unattended install, use [msys2](https://chocolatey.org/packages/msys2) package.

>= 3.1.0, < 3.1.3, >= 3.0.0, < 3.0.5, >= 2.7.0, < 2.7.7NVD