Описание
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| rails | fixed | 2:6.1.4.1+dfsg-1 | experimental | package |
| rails | fixed | 2:6.1.4.1+dfsg-3 | package | |
| rails | not-affected | buster | package | |
| rails | not-affected | stretch | package |
Примечания
https://www.openwall.com/lists/oss-security/2021/08/20/1
EPSS
Связанные уязвимости
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.
ALT-PU-2021-2693: package `gem-rails` update to version 6.1.4.1-alt1
EPSS