[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$facg7e63eKPgkIzz0f5yw8p-c034T3yIn24lfek2bleY":3,"g5a-risk:CVE-2021-41816":178},{"success":4,"data":5,"meta":176},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":59,"references":60,"referencesCount":92,"weaknesses":93,"weaknessesCount":102,"isActivelyExploited":103,"cisaInfo":27,"otxData":27,"relatedBlogPosts":104,"seoMetadata":105,"configurations":130,"relatedVendorCves":174,"notableEvents":175},"CVE-2021-41816","What is CVE-2021-41816?","CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 for Ruby.","CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windo...","2022-02-06T21:15:07.887","2024-01-24T05:15:11.28",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.04898,[39,39,39,39,39,39,39],"Critical",[43,48,51,56],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"ruby-lang","cgi","*","cpe:2.3:a:ruby-lang:cgi:*:*:*:*:*:ruby:*:*",{"vendor":44,"product":49,"version":46,"criteria":50,"vulnerable":4},"ruby","cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"fedoraproject","fedora","34","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"35","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",4,[61,67,71,74,78,82,86],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fhackerone.com\u002Freports\u002F1328463","Hackerone",[65,66],"Permissions Required","Third Party Advisory",{"url":68,"source":69,"tags":70},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FIUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN\u002F","Fedoraproject",[],{"url":72,"source":69,"tags":73},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FUTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF\u002F",[],{"url":75,"source":76,"tags":77},"https:\u002F\u002Fsecurity-tracker.debian.org\u002Ftracker\u002FCVE-2021-41816","Debian",[66],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202401-27","Gentoo",[],{"url":83,"source":84,"tags":85},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20220303-0006\u002F","Netapp",[66],{"url":87,"source":88,"tags":89},"https:\u002F\u002Fwww.ruby-lang.org\u002Fen\u002Fnews\u002F2021\u002F11\u002F24\u002Fbuffer-overrun-in-cgi-escape_html-cve-2021-41816\u002F","Ruby-lang",[90,91],"Exploit","Vendor Advisory",7,[94],{"id":95,"name":96,"description":97,"extendedDescription":98,"status":99,"abstraction":100,"structure":101},"CWE-190","Integer Overflow or Wraparound","The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","","Stable","Base","Simple",1,false,[],{"title":106,"metaDescription":107,"keywords":108,"canonicalUrl":109,"structuredData":110},"What is CVE-2021-41816? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-41816, a critical severity cyber security vulnerability from 2022. CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0...","CVE-2021-41816, CVE-2021-41816 vulnerability, CVE-2021-41816 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, ruby-lang security, fedoraproject security, cgi vulnerability, ruby vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2021-41816",{"@context":111,"@type":112,"headline":106,"description":107,"datePublished":10,"dateModified":11,"author":113,"publisher":117,"about":121,"mainEntityOfPage":125,"articleSection":128,"keywords":129},"https:\u002F\u002Fschema.org","TechArticle",{"@type":114,"name":115,"url":116},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":114,"name":115,"url":116,"logo":118},{"@type":119,"url":120},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":122,"name":6,"description":123,"additionalType":124},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":126,"@id":127},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-41816","Cybersecurity","CVE-2021-41816, CVE-2021-41816 vulnerability, CVE-2021-41816 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[131,139,153,166],{"Operator":27,"Negate":27,"Nodes":132},[133],{"Operator":134,"Negate":27,"CPEMatch":135},"OR",[136],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":137,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":138,"VersionEndIncluding":27},"BDC4A7B5-ED99-4BA3-A016-89134C733059","0.3.1",{"Operator":140,"Negate":27,"Nodes":141},"AND",[142,148],{"Operator":134,"Negate":27,"CPEMatch":143},[144],{"Vulnerable":27,"Criteria":50,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":146,"VersionEndExcluding":147,"VersionEndIncluding":27},"D4499575-33A0-47D7-A88B-0E6FD2340792","3.0.0","3.0.3",{"Operator":134,"Negate":27,"CPEMatch":149},[150],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":152},"D4772765-264E-4A9E-80A8-CA0DFFAB3E11","0.2.0",{"Operator":140,"Negate":27,"Nodes":154},[155,161],{"Operator":134,"Negate":27,"CPEMatch":156},[157],{"Vulnerable":27,"Criteria":50,"MatchCriteriaID":158,"VersionStartExcluding":27,"VersionStartIncluding":159,"VersionEndExcluding":160,"VersionEndIncluding":27},"D7B53365-0B48-4408-A4A7-9A3744F89F07","2.7.0","2.7.5",{"Operator":134,"Negate":27,"CPEMatch":162},[163],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":164,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":165},"74619D97-ACF1-4F91-A7D3-50B893FFAEBF","0.1.0",{"Operator":27,"Negate":27,"Nodes":167},[168],{"Operator":134,"Negate":27,"CPEMatch":169},[170,172],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":171,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A930E247-0B43-43CB-98FF-6CE7B8189835",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":173,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"80E516C0-98A4-4ADE-B69F-66A772E2BAAA",[],[],{"lastModified":11,"cacheTime":177,"version":33},1792258047299,{"score":179,"band":180,"action":181,"scoredAt":182},55,"Medium","Plan remediation","2026-10-16T06:53:23.390153+00:00"]