Lucene search
K

Internet Bug Bounty: The Host Authorization middleware in Action Pack is vulnerable to crafted X-Forwarded-Host values

🗓️ 19 Oct 2021 18:33:36Reported by mshtawythugType 
hackerone
 hackerone
🔗 hackerone.com👁 101 Views

The Host Authorization middleware in Action Pack is vulnerable to crafted X-Forwarded-Host values. Hackers can redirect victims to a malicious website

Related
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: A security vulnerability in Ruby on Rails Action Pack affects IBM Cloud Pak for Multicloud Management Infrastructure Management
9 Nov 202118:17
ibm
FreeBSD
Rails -- multiple vulnerabilities
10 Feb 202100:00
freebsd
Circl
CVE-2021-22881
11 Feb 202120:42
circl
Circl
CVE-2021-22942
18 Oct 202116:32
circl
CNNVD
Rails Action Pack Input Validation Error Vulnerability
11 Feb 202100:00
cnnvd
CNNVD
Ruby on Rails 输入验证错误漏洞
20 Aug 202100:00
cnnvd
CVE
CVE-2021-22881
11 Feb 202116:12
cve
CVE
CVE-2021-22942
18 Oct 202100:00
cve
Cvelist
CVE-2021-22881
11 Feb 202116:12
cvelist
Cvelist
CVE-2021-22942
18 Oct 202100:00
cvelist
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation