Lucene search

K
cvelistHackeroneCVELIST:CVE-2021-44528
HistoryJan 07, 2022 - 12:00 a.m.

CVE-2021-44528

2022-01-0700:00:00
CWE-601
hackerone
raw.githubusercontent.com
1

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.8%

A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a “X-Forwarded-Host” headers in combination with certain “allowed host” formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.8%