DemoBook a demo

Vulnerability advisory

CVE-2021-22942

Published Updated OSV record ↗

Also known as GHSA-2rqw-v265-jf8c

Severity
  • CVSS 3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected versions

Repository

Affected commitsFixed by commit
GIT github.com/rails/rails ↗
66cabeda2c46c582d19738e1318be8d59584cc5b to before 0d304eae601f085274b2e2c04316e025b443da620d304eae601f085274b2e2c04316e025b443da62
914caca2d31bd753f47f9168f2a375921d9e91cc to before 90357af08048ef5076730505f6e7b14a81f33d0c90357af08048ef5076730505f6e7b14a81f33d0c
Also listed as affected (7)
  • v6.0.4
  • v6.1.4
  • v6.1.3
  • v6.1.2
  • v6.1.1
  • v6.1.0
  • v6.0.0

Description

A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.

References

  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools

Having trouble? Check our documentation.