Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-22797HistoryFeb 09, 2023 - 8:15 p.m.
CVE-2023-22797
2023-02-0920:15:11
Debian Security Bug Tracker
security-tracker.debian.org
16
0.001 Low
EPSS
Percentile
20.6%
An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | rails | < 2:6.1.7.3+dfsg-1 | rails_2:6.1.7.3+dfsg-1_all.deb |
| Debian | 11 | all | rails | < 2:6.0.3.7+dfsg-2+deb11u2 | rails_2:6.0.3.7+dfsg-2+deb11u2_all.deb |
| Debian | 10 | all | rails | < 2:5.2.2.1+dfsg-1+deb10u3 | rails_2:5.2.2.1+dfsg-1+deb10u3_all.deb |
| Debian | 999 | all | rails | < 2:6.1.7.3+dfsg-3 | rails_2:6.1.7.3+dfsg-3_all.deb |
| Debian | 13 | all | rails | < 2:6.1.7.3+dfsg-3 | rails_2:6.1.7.3+dfsg-3_all.deb |
Related
github
github
Open Redirect Vulnerability in Action Pack
2023-01-18 18:21:23
prion
prion
Open redirect
2023-02-09 20:15:00
ubuntucve
ubuntucve
CVE-2023-22797
2023-02-09 00:00:00
cvelist
cvelist
CVE-2023-22797
2023-02-09 00:00:00
cve
cve
CVE-2023-22797
2023-02-09 20:15:11
veracode
veracode
Open Redirect
2023-01-19 02:38:52
redhatcve
redhatcve
CVE-2023-22797
2023-01-26 14:35:55
hackerone
hackerone
Internet Bug Bounty: Open Redirect Vulnerability in Action Pack
2023-02-07 23:03:04
rubygems
rubygems
Open Redirect Vulnerability in Action Pack
2023-01-17 21:00:00
osv
osv
CVE-2023-22797
2023-02-09 20:15:11
Open Redirect Vulnerability in Action Pack
2023-01-18 18:21:23
