[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3lOTSF5Jdc6s1Bo5lR7NxjyS5h-Q-2M_08sCYvwuTdw":3,"g5a-risk:CVE-2021-41819":258},{"success":4,"data":5,"meta":256},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":42,"epssPercentile":25,"epssTimeSeries":43,"severity":45,"affectedProducts":46,"affectedProductsCount":108,"references":109,"referencesCount":149,"weaknesses":150,"weaknessesCount":159,"isActivelyExploited":160,"cisaInfo":25,"otxData":25,"relatedBlogPosts":161,"seoMetadata":162,"configurations":187,"relatedVendorCves":254,"notableEvents":255},"CVE-2021-41819","What is CVE-2021-41819?","CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.","2022-01-01T06:15:07.293","2025-05-22T15:15:54.06",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":32,"CVSSMetricV40":25},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":24,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":24,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[33],{"Source":16,"Type":17,"CVSSData":34,"BaseSeverity":39,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":35,"VectorString":36,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":22,"IntegrityImpact":37,"AvailabilityImpact":22,"BaseScore":38,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.03151,[44,44,44,44,42,42,42],0.02931,"High",[47,52,55,58,62,67,71,76,79,82,86,89,92,96,100,105],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"ruby-lang","cgi","0.1.0","cpe:2.3:a:ruby-lang:cgi:0.1.0:*:*:*:*:ruby:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"0.2.0","cpe:2.3:a:ruby-lang:cgi:0.2.0:*:*:*:*:ruby:*:*",{"vendor":48,"product":49,"version":56,"criteria":57,"vulnerable":4},"0.3.0","cpe:2.3:a:ruby-lang:cgi:0.3.0:*:*:*:*:ruby:*:*",{"vendor":48,"product":59,"version":60,"criteria":61,"vulnerable":4},"ruby","*","cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":65,"criteria":66,"vulnerable":4},"redhat","software_collections","-","cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:*",{"vendor":63,"product":68,"version":69,"criteria":70,"vulnerable":4},"enterprise_linux","8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",{"vendor":72,"product":73,"version":74,"criteria":75,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":72,"product":73,"version":77,"criteria":78,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":72,"product":73,"version":80,"criteria":81,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":83,"product":84,"version":80,"criteria":85,"vulnerable":4},"suse","linux_enterprise","cpe:2.3:o:suse:linux_enterprise:11.0:sp1:*:*:*:*:*:*",{"vendor":83,"product":84,"version":87,"criteria":88,"vulnerable":4},"12.0","cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*",{"vendor":83,"product":84,"version":90,"criteria":91,"vulnerable":4},"15.0","cpe:2.3:o:suse:linux_enterprise:15.0:*:*:*:*:*:*:*",{"vendor":93,"product":94,"version":65,"criteria":95,"vulnerable":4},"opensuse","factory","cpe:2.3:a:opensuse:factory:-:*:*:*:*:*:*:*",{"vendor":93,"product":97,"version":98,"criteria":99,"vulnerable":4},"leap","15.2","cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",{"vendor":101,"product":102,"version":103,"criteria":104,"vulnerable":4},"fedoraproject","fedora","34","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",{"vendor":101,"product":102,"version":106,"criteria":107,"vulnerable":4},"35","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",16,[110,116,120,123,127,131,137,139,141,143,145,147],{"url":111,"source":112,"tags":113},"https:\u002F\u002Fhackerone.com\u002Freports\u002F910552","Hackerone",[114,115],"Permissions Required","Third Party Advisory",{"url":117,"source":118,"tags":119},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FIUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN\u002F","Fedoraproject",[],{"url":121,"source":118,"tags":122},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FUTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF\u002F",[],{"url":124,"source":125,"tags":126},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202401-27","Gentoo",[],{"url":128,"source":129,"tags":130},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20220121-0003\u002F","Netapp",[115],{"url":132,"source":133,"tags":134},"https:\u002F\u002Fwww.ruby-lang.org\u002Fen\u002Fnews\u002F2021\u002F11\u002F24\u002Fcookie-prefix-spoofing-in-cgi-cookie-parse-cve-2021-41819\u002F","Ruby-lang",[135,136],"Exploit","Vendor Advisory",{"url":111,"source":112,"tags":138},[114,115],{"url":117,"source":118,"tags":140},[],{"url":121,"source":118,"tags":142},[],{"url":124,"source":125,"tags":144},[],{"url":128,"source":129,"tags":146},[115],{"url":132,"source":133,"tags":148},[135,136],12,[151],{"id":152,"name":153,"description":154,"extendedDescription":155,"status":156,"abstraction":157,"structure":158},"CWE-565","Reliance on Cookies without Validation and Integrity Checking","The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.","Attackers can easily modify cookies, within the browser or by implementing the client-side code outside of the browser. Reliance on cookies without detailed validation and integrity checking can allow attackers to bypass authentication, conduct injection attacks such as SQL injection and cross-site scripting, or otherwise modify inputs in unexpected ways.","Incomplete","Base","Simple",1,false,[],{"title":163,"metaDescription":164,"keywords":165,"canonicalUrl":166,"structuredData":167},"What is CVE-2021-41819? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-41819, a high severity cyber security vulnerability from 2022. CGI::Cookie.parse in Ruby through 2.6.8 mishandles security...","CVE-2021-41819, CVE-2021-41819 vulnerability, CVE-2021-41819 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, ruby-lang security, redhat security, debian security, suse security, cgi vulnerability, ruby vulnerability, software_collections vulnerability, enterprise_linux vulnerability","\u002Fwhat-is\u002Fcve-2021-41819",{"@context":168,"@type":169,"headline":163,"description":164,"datePublished":9,"dateModified":10,"author":170,"publisher":174,"about":178,"mainEntityOfPage":182,"articleSection":185,"keywords":186},"https:\u002F\u002Fschema.org","TechArticle",{"@type":171,"name":172,"url":173},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":171,"name":172,"url":173,"logo":175},{"@type":176,"url":177},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":179,"name":6,"description":180,"additionalType":181},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":183,"@id":184},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-41819","Cybersecurity","CVE-2021-41819, CVE-2021-41819 vulnerability, CVE-2021-41819 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[188,210,218,228,238,246],{"Operator":25,"Negate":25,"Nodes":189},[190],{"Operator":191,"Negate":25,"CPEMatch":192},"OR",[193,195,197,199,202,206],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":194,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"2DEC113F-FF5D-48DC-896B-E1C8A2C76C9C",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":196,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"59B7F28D-757D-429F-88B5-7A8DAFB9BB4C",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":198,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"C8CB09D2-66DD-4E05-B9FC-F1C632C6942F",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":200,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":201},"64AC442C-39CB-477C-9356-F36AF6762E53","2.6.8",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":203,"VersionStartExcluding":25,"VersionStartIncluding":204,"VersionEndExcluding":205,"VersionEndIncluding":25},"D7B53365-0B48-4408-A4A7-9A3744F89F07","2.7.0","2.7.5",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":207,"VersionStartExcluding":25,"VersionStartIncluding":208,"VersionEndExcluding":209,"VersionEndIncluding":25},"D4499575-33A0-47D7-A88B-0E6FD2340792","3.0.0","3.0.3",{"Operator":25,"Negate":25,"Nodes":211},[212],{"Operator":191,"Negate":25,"CPEMatch":213},[214,216],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":215,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"749804DA-4B27-492A-9ABA-6BB562A6B3AC",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":217,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F4CFF558-3C47-480D-A2F0-BABF26042943",{"Operator":25,"Negate":25,"Nodes":219},[220],{"Operator":191,"Negate":25,"CPEMatch":221},[222,224,226],{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":223,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":225,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":227,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Operator":25,"Negate":25,"Nodes":229},[230],{"Operator":191,"Negate":25,"CPEMatch":231},[232,234,236],{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":233,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"4500161F-13A0-4369-B93A-778B34E7F005",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":235,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"CBC8B78D-1131-4F21-919D-8AC79A410FB9",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":237,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"1607628F-77A7-4C1F-98DF-0DC50AE8627D",{"Operator":25,"Negate":25,"Nodes":239},[240],{"Operator":191,"Negate":25,"CPEMatch":241},[242,244],{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":243,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"E29492E1-43D8-43BF-94E3-26A762A66FAA",{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":245,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B009C22E-30A4-4288-BCF6-C3E81DEAF45A",{"Operator":25,"Negate":25,"Nodes":247},[248],{"Operator":191,"Negate":25,"CPEMatch":249},[250,252],{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":251,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"A930E247-0B43-43CB-98FF-6CE7B8189835",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":253,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"80E516C0-98A4-4ADE-B69F-66A772E2BAAA",[],[],{"lastModified":10,"cacheTime":257,"version":35},1793231846148,{"score":259,"band":260,"action":261,"scoredAt":262},48,"Medium","Plan remediation","2026-10-28T06:52:45.010418+00:00"]