CVE-2021-22942

A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.

References

Affected packages

Git / github.com/rails/rails

Affected ranges

Type

GIT

Repo

https://github.com/rails/rails

Events

Introduced

66cabeda2c46c582d19738e1318be8d59584cc5b

Fixed

0d304eae601f085274b2e2c04316e025b443da62

Introduced

914caca2d31bd753f47f9168f2a375921d9e91cc

Fixed

90357af08048ef5076730505f6e7b14a81f33d0c

Database specific

{
    "versions": [
        {
            "introduced": "6.0.0"
        },
        {
            "fixed": "6.0.4.1"
        },
        {
            "introduced": "6.1.0"
        },
        {
            "fixed": "6.1.4.1"
        }
    ]
}

Affected versions

v6.*

v6.0.0

v6.0.1.rc1

v6.0.2

v6.0.2.1

v6.0.2.2

v6.0.2.rc1

v6.0.2.rc2

v6.0.3

v6.0.3.1

v6.0.3.2

v6.0.3.3

v6.0.3.4

v6.0.3.5

v6.0.3.6

v6.0.3.7

v6.0.3.rc1

v6.0.4

v6.1.0

v6.1.1

v6.1.2

v6.1.2.1

v6.1.3

v6.1.3.1

v6.1.3.2

v6.1.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-22942.json"