RubyGems/actionpack CVE-2021-22903: medium 6.1, EPSS 1.23%
Possible Open Redirect Vulnerability in Action Pack
Action: Upgrade actionpack to 6.1.3.2 or later.
bundle update actionpackAffected
| introduced | fixed | last affected |
|---|---|---|
| 6.1.0.rc2 | 6.1.3.2 | - |
Fixed versions
| 6.1.3.2 |
Sources
- osv: GHSA-5hq2-xf89-9jxq
- https://nvd.nist.gov/vuln/detail/CVE-2021-22903
- https://hackerone.com/reports/1148025
- https://discuss.rubyonrails.org/t/cve-2021-22903-possible-open-redirect-vulnerability-in-action-pack/77867
- https://github.com/rails/rails/releases/tag/v6.1.3.2
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22903.yml
- https://groups.google.com/g/rubyonrails-security/c/8TxqXEtgSF0
CVE-2021-22903 · published · modified · JSON