GHSA-j6w9-fv6q-3q52

Rack allows Percent-encoded cookies to overwrite existing prefixed cookie names

Source: GitHub Advisory Database (reviewed) High CVE-2020-8184

Packages

Ecosystem	Package	Affected	Fixed in
RubyGems	rack	< 2.1.4	2.1.4
RubyGems	rack	>= 2.2.0, < 2.2.3	2.2.3

Details

As written in the advisory (Markdown source, shown as plain text).

A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it possible for an attacker to forge a secure or host-only cookie prefix.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2020-8184 advisory
https://github.com/rack/rack/commit/1f5763de6a9fe515ff84992b343d63c88104654c web
https://hackerone.com/reports/895727 web
https://github.com/rack/rack package
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2020-8184.yml web
https://groups.google.com/g/rubyonrails-security/c/OWtmozPH9Ak web
https://lists.debian.org/debian-lts-announce/2020/07/msg00006.html web
https://lists.debian.org/debian-lts-announce/2023/01/msg00038.html web
https://usn.ubuntu.com/4561-1 web