CVE-2021-22942

2021-10-1800:00:00

CWE-601

hackerone

www.cve.org

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "https://github.com/rails/rails",
    "versions": [
      {
        "version": "6.1.4.1, 6.0.4.1",
        "status": "affected"
      }
    ]
  }
]