Lucene search
+L

6 matches found

RubySec
RubySec
•added 2021/12/14 12:00 a.m.•52 views

Possible Open Redirect in Host Authorization Middleware

There is a possible open redirect vulnerability in the Host Authorization middleware in Action Pack. Specially crafted "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website...

6.1CVSS6.4AI score0.04182EPSS
SaveExploits1References1Affected Software1
Github Security Blog
Github Security Blog
•added 2021/08/26 8:36 p.m.•58 views

Open Redirect in ActionPack

Overview There is a possible open redirect vulnerability in the Host Authorization middleware in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2021-22942. Versions Affected: = 6.0.0. Not affected: 6.0.0 Fixed Versions: 6.1.4.1, 6.0.4.1 Impact Specially crafted...

6.1CVSS6.1AI score0.01695EPSS
SaveExploits0References10Affected Software1
osv_ghsa
osv_ghsa
•added 2021/08/26 8:36 p.m.•53 views

GHSA-2RQW-V265-JF8C Open Redirect in ActionPack

Overview There is a possible open redirect vulnerability in the Host Authorization middleware in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2021-22942. Versions Affected: = 6.0.0. Not affected: 6.0.0 Fixed Versions: 6.1.4.1, 6.0.4.1 Impact Specially crafted...

6.1CVSS6.1AI score0.01695EPSS
SaveExploits0References10
RubySec
RubySec
•added 2021/08/19 12:00 a.m.•48 views

Possible Open Redirect in Host Authorization Middleware

There is a possible open redirect vulnerability in the Host Authorization middleware in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2021-22942. Versions Affected: = 6.0.0. Not affected: 6.0.0 Fixed Versions: 6.1.4.1, 6.0.4.1 Impact ------ Specially crafted...

6.1CVSS3.5AI score0.01695EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2016/10/23 12:00 a.m.•5 views

PT-2016-3248

Name of the Vulnerable Software and Affected Versions Apsis Pound versions prior to 2.8a Description The issue is related to deficiencies in handling HTTP requests, which can be exploited by a remote attacker to send a hidden HTTP request, known as an HTTP Request Smuggling attack, using speciall...

9.8CVSS0.02839EPSS
SaveExploits0References22
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•25 views

Majordomo 1.89/1.90 lists Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2310/info Majordomo is a perl-based Internet e-mail list server. Versions prior to 1.91 are vulnerable to an attack whereby specially crafted e-mail headers are incorrectly processed, yielding the ability to execute...

7.1AI score
SaveExploits0
Rows per page
Query Builder