Описание
Open Redirect in ActionPack
Overview
There is a possible open redirect vulnerability in the Host Authorization middleware in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2021-22942.
Versions Affected: >= 6.0.0. Not affected: < 6.0.0 Fixed Versions: 6.1.4.1, 6.0.4.1
Impact
Specially crafted “X-Forwarded-Host” headers in combination with certain “allowed host” formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.
Impacted applications will have allowed hosts with a leading dot. For example, configuration files that look like this:
When an allowed host contains a leading dot, a specially crafted Host header can be used to redirect to a malicious website.
This vulnerability is similar to CVE-2021-22881, but CVE-2021-22881 did not take in to account domain name case sensitivity.
Releases
The fixed releases are available at the normal locations.
Workarounds
In the case a patch can’t be applied, the following monkey patch can be used in an initializer:
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2021-22942
- https://access.redhat.com/security/cve/cve-2021-22942
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22942.yml
- https://groups.google.com/g/rubyonrails-security/c/wB5tRn7h36c
- https://rubygems.org/gems/actionpack
- https://security.netapp.com/advisory/ntap-20240202-0005
- https://weblog.rubyonrails.org/2021/8/19/Rails-6-0-4-1-and-6-1-4-1-have-been-released
- https://www.debian.org/security/2023/dsa-5372
- http://www.openwall.com/lists/oss-security/2021/12/14/5
Пакеты
actionpack
>= 6.0.0, <= 6.0.4
6.0.4.1
actionpack
>= 6.1.0, <= 6.1.4
6.1.4.1
Связанные уязвимости
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.
A possible open redirect vulnerability in the Host Authorization middl ...