CVE-2021-44528
1 advisory.
RubyGems/actionpack CVE-2021-44528: medium 6.1
actionpack Open Redirect in Host Authorization Middleware
Action: Upgrade actionpack to 6.0.4.2 or later.
bundle update actionpackAffected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 6.0.4.2 | - |
| 6.1.0 | 6.1.4.2 | - |
Fixed versions
| 6.0.4.2 | 6.1.4.2 |
Sources
- osv: GHSA-qphc-hf5q-v8fc
- https://nvd.nist.gov/vuln/detail/CVE-2021-44528
- https://github.com/rails/rails/commit/0fccfb9a3097a9c4260c791f1a40b128517e7815
- https://github.com/rails/rails/commit/aecba3c301b80e9d5a63c30ea1b287bceaf2c107
- https://github.com/rails/rails
- https://github.com/rails/rails/blob/v6.1.4.2/actionpack/CHANGELOG.md#rails-6142-december-14-2021
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-44528.yml
- https://groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ
- https://groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ?utm_medium=email&utm_source=footer
- https://security.netapp.com/advisory/ntap-20240208-0003
- https://www.debian.org/security/2023/dsa-5372
CVE-2021-44528 · published · modified · JSON