Lucene search
Veracode Vulnerability DatabaseVERACODE:29385HistoryFeb 15, 2021 - 3:48 a.m.
Open Redirection
2021-02-1503:48:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
27
rails
open redirection
validation bypass
malicious host header
redirect vulnerability
regex matching
EPSS
0.002
Percentile
61.0%
rails is vulnerable to open redirection. Inadequate validation and regex matching of URLs allows an attacker to bypass validation checks using a malicious Host header and redirect users to a malicious website.
References
www.openwall.com/lists/oss-security/2021/05/05/2
www.openwall.com/lists/oss-security/2021/08/20/1
www.openwall.com/lists/oss-security/2021/12/14/5
benjamin-bouchet.com/cve-2021-22881-faille-de-securite-dans-le-middleware-hostauthorization/
discuss.rubyonrails.org/t/cve-2021-22881-possible-open-redirect-in-host-authorization-middleware/77130
github.com/rails/rails/pull/41435
hackerone.com/reports/1047447
lists.fedoraproject.org/archives/list/[email protected]/message/XQ3NS4IBYE2I3MVMGAHFZBZBIZGHXHT3/
Related
github
github
Actionpack Open Redirect Vulnerability
2021-03-02 03:44:17
Open Redirect in ActionPack
2021-08-26 20:36:51
Possible Open Redirect Vulnerability in Action Pack
2021-05-05 19:48:29
ubuntucve
ubuntucve
CVE-2021-22881
2021-02-11 00:00:00
CVE-2021-22903
2021-06-11 00:00:00
debiancve
debiancve
CVE-2021-22881
2021-02-11 18:15:17
CVE-2021-22903
2021-06-11 16:15:11
prion
prion
Open redirect
2021-02-11 18:15:00
Open redirect
2021-06-11 16:15:00
cvelist
cvelist
CVE-2021-22881
2021-02-11 16:12:34
CVE-2021-22903
2021-06-11 15:49:38
osv
osv
CVE-2021-22881
2021-02-11 18:15:17
Actionpack Open Redirect Vulnerability
2021-03-02 03:44:17
Possible Open Redirect Vulnerability in Action Pack
2021-05-05 19:48:29
redhatcve
redhatcve
CVE-2021-22881
2021-02-18 15:38:23
cve
cve
CVE-2021-22881
2021-02-11 18:15:17
CVE-2021-22903
2021-06-11 16:15:11
veracode
veracode
Open Redirect
2021-02-15 01:22:32
nvd
nvd
CVE-2021-22881
2021-02-11 18:15:17
CVE-2021-22903
2021-06-11 16:15:11
hackerone
hackerone
rubygems
rubygems
Possible Open Redirect in Host Authorization Middleware
2021-02-09 21:00:00
Possible Open Redirect Vulnerability in Action Pack
2021-05-04 21:00:00
Possible Open Redirect in Host Authorization Middleware
2021-08-18 21:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: rubygem-activerecord-6.0.3.4-2.fc33
2021-03-12 20:30:33
[SECURITY] Fedora 33 Update: rubygem-actionpack-6.0.3.4-2.fc33
2021-03-12 20:30:33
freebsd
freebsd
Rails -- multiple vulnerabilities
2021-02-10 00:00:00
openvas
openvas
Fedora: Security Advisory for rubygem-actionpack (FEDORA-2021-b571fca1b8)
2021-03-13 00:00:00
Fedora: Security Advisory for rubygem-activerecord (FEDORA-2021-b571fca1b8)
2021-03-13 00:00:00
nessus
nessus