{"id":"CVE-2021-44528","published":"2022-01-07T00:00:00Z","modified":"2024-08-04T04:25:16Z","title":"A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a…","vendor":null,"product":null,"tier":"tail","description":{"text":"A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a \"X-Forwarded-Host\" headers in combination with certain \"allowed host\" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.04182,"percentile":0.90899,"provenance":"source"},"cwes":[{"id":"CWE-601","name":"URL Redirection to Untrusted Site"}],"references":[{"url":"https://github.com/rails/rails/commit/0fccfb9a3097a9c4260c791f1a40b128517e7815","tags":[]},{"url":"https://www.debian.org/security/2023/dsa-5372","tags":["vendor-advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240208-0003/","tags":[]}],"priority":{"score":23.2,"factors":[{"name":"EPSS percentile","points":18.18},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"nuclei":[{"id":"CVE-2021-44528","name":"Open Redirect in Host Authorization Middleware","severity":"medium","path":"http/cves/2021/CVE-2021-44528.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44528.yaml"}],"provenance":"source"},"affectedVersions":[{"vendor":"n/a","product":"https://github.com/rails/rails","versions":["6.1.4.2, 6.0.4.2, 7.0.0.rc2"]}],"affected":[{"ecosystem":"RubyGems","package":"actionpack","vulnerableRanges":[">=6.0.0, <6.0.4.2",">=6.1.0, <6.1.4.2"],"patched":["6.0.4.2","6.1.4.2"],"from":["GHSA-qphc-hf5q-v8fc"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-2571","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-actionpack-cve-2021-22881","parents":[{"from":"CVE-2021-22881","to":"CVE-2021-44528","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["actionpack/lib/action_dispatch/middleware/host_authorization.rb"],"commits":["https://github.com/rails/rails/commit/b5de7b3a4787d8a55aaad39f477c16e3af65e444","https://github.com/rails/rails/commit/0fccfb9a3097a9c4260c791f1a40b128517e7815","https://github.com/rails/rails/commit/aecba3c301b80e9d5a63c30ea1b287bceaf2c107"],"basis":"shared function","functions":["call"]},{"kind":"similar","provenance":"machine","score":0.78,"basis":"same package + description similarity"}]}],"packageHistory":[{"cve":"CVE-2021-22903","published":"2021-06-11","fixed":"6.1.3.2","kev":false},{"cve":"CVE-2021-22904","published":"2021-06-11","fixed":"6.1.3.2","kev":false},{"cve":"CVE-2021-22942","published":"2021-10-18","fixed":"6.1.4.1","kev":false,"link":{"from":"CVE-2021-22942","to":"CVE-2021-44528","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"RubyGems:actionpack","fromFixed":"6.0.4.1","toFixed":"6.0.4.2","daysApart":81},{"kind":"similar","provenance":"machine","score":0.75,"basis":"same package + description similarity"}]}},{"cve":"CVE-2021-44528","published":"2022-01-07","fixed":"6.1.4.2","kev":false},{"cve":"CVE-2022-23633","published":"2022-02-11","fixed":"7.0.2.2","kev":false,"link":{"from":"CVE-2021-44528","to":"CVE-2022-23633","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"RubyGems:actionpack","fromFixed":"6.0.4.2","toFixed":"6.0.4.6","daysApart":35}]}},{"cve":"CVE-2022-22577","published":"2022-05-26","fixed":"7.0.2.4","kev":false},{"cve":"CVE-2023-22792","published":"2023-02-09","fixed":"7.0.4.1","kev":false}],"package":"RubyGems:actionpack"}}