CVE:CVE-2021-33621
CNNVD:CNNVD-202211-3133
Ruby是松本行弘个人开发者的一种跨平台、面向对象的动态类型编程语言。
Ruby 存在安全漏洞，该漏洞源于 cgi gem 允许 HTTP 响应拆分。
solution:Upgrade ruby-lang cgi to a higher version than 0.1.0.2,0.2.2,0.3.5,and avoid the version (,0.1.0.2),[0.2.0,0.2.2),[0.3.0,0.3.5); Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade ruby-lang ruby to a higher version than 2.7.7,3.0.5,3.1.3,and avoid the version [2.7.0,2.7.7),[3.0.0,3.0.5),[3.1.0,3.1.3)