Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-44528

Опубликовано: 10 янв. 2022
Источник: nvd
CVSS3: 6.1
CVSS2: 5.8
EPSS Средний

Описание

A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rubyonrails:rails:6.0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:rubyonrails:rails:6.1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:rubyonrails:rails:7.0.0:rc2:*:*:*:*:*:*

EPSS

Процентиль: 96%
0.26792
Средний

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601
CWE-601

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 3 лет назад

A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.

CVSS3: 5.4
redhat
больше 3 лет назад

A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.

CVSS3: 6.1
debian
больше 3 лет назад

A open redirect vulnerability exists in Action Pack >= 6.0.0 that coul ...

CVSS3: 6.1
redos
10 месяцев назад

Уязвимость rubygem-actionpack

CVSS3: 6.1
github
больше 3 лет назад

actionpack Open Redirect in Host Authorization Middleware

EPSS

Процентиль: 96%
0.26792
Средний

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601
CWE-601