Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/rails/rails ↗ | |
| 66cabeda2c46c582d19738e1318be8d59584cc5b to before c5929d5eb55b749bc124b3ccc2d79323d015701f | c5929d5eb55b749bc124b3ccc2d79323d015701f |
| 914caca2d31bd753f47f9168f2a375921d9e91cc to before 130c128eae233bf71231c73b9c3c3b3f3ede918b | 130c128eae233bf71231c73b9c3c3b3f3ede918b |
Also listed as affected (10)
| |
Description
The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted Host header can be used to redirect to a malicious website.
References
- Weblists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3NS4IBYE2I3MVMGAHFZBZBIZGHXHT3/ ↗
- Advisorywww.openwall.com/lists/oss-security/2021/05/05/2 ↗
- Advisorywww.openwall.com/lists/oss-security/2021/08/20/1 ↗
- Fixwww.openwall.com/lists/oss-security/2021/12/14/5 ↗
- Fixbenjamin-bouchet.com/cve-2021-22881-faille-de-securite-dans-le-middleware-hostauthorization/ ↗
- Fixdiscuss.rubyonrails.org/t/cve-2021-22881-possible-open-redirect-in-host-authorization-middleware/77130 ↗
- Fixhackerone.com/reports/1047447 ↗