actionpack Open Redirect in Host Authorization Middleware

🗓️ 14 Dec 2021 21:19:08Reported by GitHub Advisory DatabaseType

actionpack Open Redirect in Host Authorization Middlewar

Reporter	Title	Published	Views	Family All 47
Circl	CVE-2021-44528	10 Jan 202216:21	–	circl
CNNVD	Rails Action Pack 输入验证错误漏洞	10 Jan 202200:00	–	cnnvd
CVE	CVE-2021-44528	7 Jan 202200:00	–	cve
Cvelist	CVE-2021-44528	7 Jan 202200:00	–	cvelist
Debian	[SECURITY] [DSA 5372-1] rails security update	13 Mar 202303:06	–	debian
Debian CVE	CVE-2021-44528	7 Jan 202200:00	–	debiancve
Tenable Nessus	Debian DSA-5372-1 : rails - security update	14 Mar 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-44528	30 Aug 202500:00	–	nessus
Nuclei	Open Redirect in Host Authorization Middleware	7 Jun 202603:02	–	nuclei
NVD	CVE-2021-44528	10 Jan 202214:10	–	nvd

Vulners

Node

actionpack_project actionpackRange6.1.0–6.1.4.1rubygems

actionpack_project actionpackRange6.0.0–6.0.4.1rubygems

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-44528
groups	www.groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ
github	www.github.com/rails/rails/commit/aecba3c301b80e9d5a63c30ea1b287bceaf2c107
github	www.github.com/rails/rails/blob/v6.1.4.2/actionpack/CHANGELOG.md
github	www.github.com/rails/rails/commit/0fccfb9a3097a9c4260c791f1a40b128517e7815
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-44528.yml
groups	www.groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ
debian	www.debian.org/security/2023/dsa-5372
security	www.security.netapp.com/advisory/ntap-20240208-0003/
github	www.github.com/advisories/GHSA-qphc-hf5q-v8fc

18 Feb 2024 05:06Current

6.4Medium risk

Vulners AI Score6.4

CVSS 25.8

CVSS 3.16.1

EPSS0.28611