CVE-2021-22942

2021-10-1800:00:00

CWE-601

hackerone

www.cve.org

open redirect

host authorization

action pack

malicious website

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

47.3%

JSON

A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "https://github.com/rails/rails",
    "versions": [
      {
        "version": "6.1.4.1, 6.0.4.1",
        "status": "affected"
      }
    ]
  }
]