CVE-2021-22942

A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.

References

Affected packages

Git / github.com/rails/rails

Affected ranges

Type

GIT

Repo

https://github.com/rails/rails

Events

Introduced

66cabeda2c46c582d19738e1318be8d59584cc5b

Fixed

0d304eae601f085274b2e2c04316e025b443da62

Introduced

914caca2d31bd753f47f9168f2a375921d9e91cc

Fixed

90357af08048ef5076730505f6e7b14a81f33d0c

Database specific

{
    "extracted_events": [
        {
            "introduced": "6.0.0"
        },
        {
            "fixed": "6.0.4.1"
        },
        {
            "introduced": "6.1.0"
        },
        {
            "fixed": "6.1.4.1"
        }
    ],
    "cpe": "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
    "source": "CPE_FIELD"
}

Affected versions

v6.*

v6.0.0

v6.0.4

v6.1.0

v6.1.1

v6.1.2

v6.1.3

v6.1.4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-22942.json"