{"action":"Upgrade actionpack to 6.0.4.1 or later.","affected":[{"fixed":"6.0.4.1","introduced":"6.0.0"},{"fixed":"6.1.4.1","introduced":"6.1.0"}],"component":"actionpack","cve_ids":["CVE-2021-22942"],"ecosystem":"RubyGems","epss":0.01695,"exploited":false,"fixed_versions":["6.0.4.1","6.1.4.1"],"ghsa_id":"GHSA-2rqw-v265-jf8c","id":"tcs_01M5KEG0PG3WS64259MVTQRK2Z","modified_at":"2024-02-21T05:31:33.873268Z","published_at":"2021-08-26T20:36:51Z","references":["https://osv.dev/vulnerability/GHSA-2rqw-v265-jf8c","https://nvd.nist.gov/vuln/detail/CVE-2021-22942","https://access.redhat.com/security/cve/cve-2021-22942","https://github.com/rails/rails","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22942.yml","https://groups.google.com/g/rubyonrails-security/c/wB5tRn7h36c","https://rubygems.org/gems/actionpack","https://security.netapp.com/advisory/ntap-20240202-0005","https://weblog.rubyonrails.org/2021/8/19/Rails-6-0-4-1-and-6-1-4-1-have-been-released","https://www.debian.org/security/2023/dsa-5372","http://www.openwall.com/lists/oss-security/2021/12/14/5"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-2rqw-v265-jf8c","url":"https://osv.dev/vulnerability/GHSA-2rqw-v265-jf8c"}],"summary":"Open Redirect in ActionPack"}