CVE-2021-41263

RubyGems/rails_multisite CVE-2021-41263: medium 6.2, EPSS 0.63%

Rails Multisite secure/signed cookies share secrets between sites in a multi-site application

Action: Upgrade rails_multisite to 4.0.0 or later.

bundle update rails_multisite

Affected

Fixed versions

Sources

• osv: GHSA-844m-cpr9-jcmh
• https://github.com/discourse/rails_multisite/security/advisories/GHSA-844m-cpr9-jcmh
• https://nvd.nist.gov/vuln/detail/CVE-2021-41263
• https://github.com/discourse/rails_multisite/commit/c6785cdb5c9277dd2c5ac8d55180dd1ece440ed0
• https://github.com/discourse/rails_multisite
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rails_multisite/CVE-2021-41263.yml

CVE-2021-41263 · published 2021-11-15T17:54:01Z · modified 2026-07-08T06:28:21.002220346Z · JSON