Skip to content
fr Sign in
5.8 Medium

CVE-2025-27219 In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of…

Description

In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service (DoS) vulnerability. The method does not impose any limit on the length of the raw cookie value it processes. This oversight can lead to excessive resource consumption when parsing extremely large cookies.

Affected products and versions

Product Affected versions Fixed in
CGI 0.4 0.4.0 → < 0.4.2 0.4.2
CGI 0.3 earliest → < 0.3.7 0.3.5.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of CGI

The 2 CVEs of CGI →
CVE-2025-27220 In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the… 4.0 Medium
Track this CVE