CVE-2021-41263

CVE-2021-41263 is a high-severity vulnerability affecting Rails applications utilizing the rails_multisite gem for multi-database support, specifically when combined with Rails' signed/encrypted cookies. An attacker could potentially reuse cookies across different sites within a multi-site application, leading to unauthorized access, data compromise, and service disruption. The vulnerability has a CVSS score of 8.8 (High) due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, organizations using affected versions should upgrade to rails_multisite v4 to mitigate the risk, noting that this will invalidate previous cookies.