[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3lOTSF5Jdc6s1Bo5lR7NxjyS5h-Q-2M_08sCYvwuTdw":3,"g5a-risk:CVE-2021-41819":257},{"success":4,"data":5,"meta":255},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":42,"epssPercentile":25,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":107,"references":108,"referencesCount":148,"weaknesses":149,"weaknessesCount":158,"isActivelyExploited":159,"cisaInfo":25,"otxData":25,"relatedBlogPosts":160,"seoMetadata":161,"configurations":186,"relatedVendorCves":253,"notableEvents":254},"CVE-2021-41819","What is CVE-2021-41819?","CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.","2022-01-01T06:15:07.293","2025-05-22T15:15:54.06",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":32,"CVSSMetricV40":25},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":24,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":24,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[33],{"Source":16,"Type":17,"CVSSData":34,"BaseSeverity":39,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":35,"VectorString":36,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":22,"IntegrityImpact":37,"AvailabilityImpact":22,"BaseScore":38,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.02931,[42,42,42,42,42,42,42],"High",[46,51,54,57,61,66,70,75,78,81,85,88,91,95,99,104],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"ruby-lang","cgi","0.1.0","cpe:2.3:a:ruby-lang:cgi:0.1.0:*:*:*:*:ruby:*:*",{"vendor":47,"product":48,"version":52,"criteria":53,"vulnerable":4},"0.2.0","cpe:2.3:a:ruby-lang:cgi:0.2.0:*:*:*:*:ruby:*:*",{"vendor":47,"product":48,"version":55,"criteria":56,"vulnerable":4},"0.3.0","cpe:2.3:a:ruby-lang:cgi:0.3.0:*:*:*:*:ruby:*:*",{"vendor":47,"product":58,"version":59,"criteria":60,"vulnerable":4},"ruby","*","cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",{"vendor":62,"product":63,"version":64,"criteria":65,"vulnerable":4},"redhat","software_collections","-","cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:*",{"vendor":62,"product":67,"version":68,"criteria":69,"vulnerable":4},"enterprise_linux","8.0","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":73,"criteria":74,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":76,"criteria":77,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":79,"criteria":80,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",{"vendor":82,"product":83,"version":79,"criteria":84,"vulnerable":4},"suse","linux_enterprise","cpe:2.3:o:suse:linux_enterprise:11.0:sp1:*:*:*:*:*:*",{"vendor":82,"product":83,"version":86,"criteria":87,"vulnerable":4},"12.0","cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*",{"vendor":82,"product":83,"version":89,"criteria":90,"vulnerable":4},"15.0","cpe:2.3:o:suse:linux_enterprise:15.0:*:*:*:*:*:*:*",{"vendor":92,"product":93,"version":64,"criteria":94,"vulnerable":4},"opensuse","factory","cpe:2.3:a:opensuse:factory:-:*:*:*:*:*:*:*",{"vendor":92,"product":96,"version":97,"criteria":98,"vulnerable":4},"leap","15.2","cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",{"vendor":100,"product":101,"version":102,"criteria":103,"vulnerable":4},"fedoraproject","fedora","34","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",{"vendor":100,"product":101,"version":105,"criteria":106,"vulnerable":4},"35","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",16,[109,115,119,122,126,130,136,138,140,142,144,146],{"url":110,"source":111,"tags":112},"https:\u002F\u002Fhackerone.com\u002Freports\u002F910552","Hackerone",[113,114],"Permissions Required","Third Party Advisory",{"url":116,"source":117,"tags":118},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FIUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN\u002F","Fedoraproject",[],{"url":120,"source":117,"tags":121},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FUTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF\u002F",[],{"url":123,"source":124,"tags":125},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202401-27","Gentoo",[],{"url":127,"source":128,"tags":129},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20220121-0003\u002F","Netapp",[114],{"url":131,"source":132,"tags":133},"https:\u002F\u002Fwww.ruby-lang.org\u002Fen\u002Fnews\u002F2021\u002F11\u002F24\u002Fcookie-prefix-spoofing-in-cgi-cookie-parse-cve-2021-41819\u002F","Ruby-lang",[134,135],"Exploit","Vendor Advisory",{"url":110,"source":111,"tags":137},[113,114],{"url":116,"source":117,"tags":139},[],{"url":120,"source":117,"tags":141},[],{"url":123,"source":124,"tags":143},[],{"url":127,"source":128,"tags":145},[114],{"url":131,"source":132,"tags":147},[134,135],12,[150],{"id":151,"name":152,"description":153,"extendedDescription":154,"status":155,"abstraction":156,"structure":157},"CWE-565","Reliance on Cookies without Validation and Integrity Checking","The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.","Attackers can easily modify cookies, within the browser or by implementing the client-side code outside of the browser. Reliance on cookies without detailed validation and integrity checking can allow attackers to bypass authentication, conduct injection attacks such as SQL injection and cross-site scripting, or otherwise modify inputs in unexpected ways.","Incomplete","Base","Simple",1,false,[],{"title":162,"metaDescription":163,"keywords":164,"canonicalUrl":165,"structuredData":166},"What is CVE-2021-41819? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-41819, a high severity cyber security vulnerability from 2022. CGI::Cookie.parse in Ruby through 2.6.8 mishandles security...","CVE-2021-41819, CVE-2021-41819 vulnerability, CVE-2021-41819 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, ruby-lang security, redhat security, debian security, suse security, cgi vulnerability, ruby vulnerability, software_collections vulnerability, enterprise_linux vulnerability","\u002Fwhat-is\u002Fcve-2021-41819",{"@context":167,"@type":168,"headline":162,"description":163,"datePublished":9,"dateModified":10,"author":169,"publisher":173,"about":177,"mainEntityOfPage":181,"articleSection":184,"keywords":185},"https:\u002F\u002Fschema.org","TechArticle",{"@type":170,"name":171,"url":172},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":170,"name":171,"url":172,"logo":174},{"@type":175,"url":176},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":178,"name":6,"description":179,"additionalType":180},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":182,"@id":183},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-41819","Cybersecurity","CVE-2021-41819, CVE-2021-41819 vulnerability, CVE-2021-41819 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[187,209,217,227,237,245],{"Operator":25,"Negate":25,"Nodes":188},[189],{"Operator":190,"Negate":25,"CPEMatch":191},"OR",[192,194,196,198,201,205],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":193,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"2DEC113F-FF5D-48DC-896B-E1C8A2C76C9C",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":195,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"59B7F28D-757D-429F-88B5-7A8DAFB9BB4C",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":197,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"C8CB09D2-66DD-4E05-B9FC-F1C632C6942F",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":199,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":200},"64AC442C-39CB-477C-9356-F36AF6762E53","2.6.8",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":202,"VersionStartExcluding":25,"VersionStartIncluding":203,"VersionEndExcluding":204,"VersionEndIncluding":25},"D7B53365-0B48-4408-A4A7-9A3744F89F07","2.7.0","2.7.5",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":206,"VersionStartExcluding":25,"VersionStartIncluding":207,"VersionEndExcluding":208,"VersionEndIncluding":25},"D4499575-33A0-47D7-A88B-0E6FD2340792","3.0.0","3.0.3",{"Operator":25,"Negate":25,"Nodes":210},[211],{"Operator":190,"Negate":25,"CPEMatch":212},[213,215],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":214,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"749804DA-4B27-492A-9ABA-6BB562A6B3AC",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":216,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F4CFF558-3C47-480D-A2F0-BABF26042943",{"Operator":25,"Negate":25,"Nodes":218},[219],{"Operator":190,"Negate":25,"CPEMatch":220},[221,223,225],{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":222,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":224,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":226,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"FA6FEEC2-9F11-4643-8827-749718254FED",{"Operator":25,"Negate":25,"Nodes":228},[229],{"Operator":190,"Negate":25,"CPEMatch":230},[231,233,235],{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":232,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"4500161F-13A0-4369-B93A-778B34E7F005",{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":234,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"CBC8B78D-1131-4F21-919D-8AC79A410FB9",{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":236,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"1607628F-77A7-4C1F-98DF-0DC50AE8627D",{"Operator":25,"Negate":25,"Nodes":238},[239],{"Operator":190,"Negate":25,"CPEMatch":240},[241,243],{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":242,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"E29492E1-43D8-43BF-94E3-26A762A66FAA",{"Vulnerable":4,"Criteria":98,"MatchCriteriaID":244,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B009C22E-30A4-4288-BCF6-C3E81DEAF45A",{"Operator":25,"Negate":25,"Nodes":246},[247],{"Operator":190,"Negate":25,"CPEMatch":248},[249,251],{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":250,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"A930E247-0B43-43CB-98FF-6CE7B8189835",{"Vulnerable":4,"Criteria":106,"MatchCriteriaID":252,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"80E516C0-98A4-4ADE-B69F-66A772E2BAAA",[],[],{"lastModified":10,"cacheTime":256,"version":35},1792258047389,{"score":258,"band":259,"action":260,"scoredAt":261},48,"Medium","Plan remediation","2026-10-16T06:52:52.580068+00:00"]