CVE-2021-33621: HTTP response splitting in CGI

Posted by mame on 22 Nov 2022 We have released the cgi gem version 0.3.5, 0.2.2, and 0.1.0.2 that has a security fix for a HTTP response splitting vulnerability. This vulnerability has been assigned the CVE identifier CVE-2021-33621. Details If an application that generates HTTP responses using the cgi gem with untrusted user input, an attacker can exploit it to inject a malicious HTTP response he

[ockeghem]

Rubyのcgi gemにHTTPレスポンス分割の脆弱性CVE-2021-3362を報告して cgi gem 0.3.5等にて修正されました。対応いただいた皆様ありがとうございました

[YassLab]

🙏✨ “Thanks to Hiroshi Tokumaru for discovering this issue.”