{"id":"CVE-2021-22903","published":"2021-06-11T15:49:38Z","modified":"2024-08-03T18:58:25Z","title":"The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability","vendor":null,"product":null,"tier":"tail","description":{"text":"The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Specially crafted Host headers in combination with certain \"allowed host\" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. This is similar to CVE-2021-22881. Strings in config.hosts that do not have a leading dot are converted to regular expressions without proper escaping. This causes, for example, `config.hosts << \"sub.example.com\"` to permit a request with a Host header value of `sub-example.com`.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.0123,"percentile":0.68822,"provenance":"source"},"cwes":[{"id":"CWE-601","name":"URL Redirection to Untrusted Site"}],"references":[{"url":"https://hackerone.com/reports/1148025","tags":["x_refsource_MISC"]},{"url":"https://discuss.rubyonrails.org/t/cve-2021-22903-possible-open-redirect-vulnerability-in-action-pack/77867","tags":["x_refsource_MISC"]}],"priority":{"score":13.8,"factors":[{"name":"EPSS percentile","points":13.76}]},"affectedVersions":[{"vendor":"n/a","product":"https://github.com/rails/rails","versions":["Fixed in 6.1.3.2"]}],"affected":[{"ecosystem":"RubyGems","package":"actionpack","vulnerableRanges":[">=6.1.0.rc2, <6.1.3.2"],"patched":["6.1.3.2"],"from":["GHSA-5hq2-xf89-9jxq"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-0957","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-actionpack-cve-2021-22881","parents":[{"from":"CVE-2021-22881","to":"CVE-2021-22903","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"This is similar to CVE-2021-22881.","from":"CVE.org","in":"CVE-2021-22903"},{"kind":"similar","provenance":"machine","score":0.64,"basis":"same package + description similarity"}]}]}}