{"action":"Upgrade actionpack to 6.1.3.2 or later.","affected":[{"fixed":"6.1.3.2","introduced":"6.1.0.rc2"}],"component":"actionpack","cve_ids":["CVE-2021-22903"],"ecosystem":"RubyGems","epss":0.0123,"exploited":false,"fixed_versions":["6.1.3.2"],"ghsa_id":"GHSA-5hq2-xf89-9jxq","id":"tcs_01M5KEH14QVDMC61A7CEM518PS","modified_at":"2024-02-16T08:18:07.647142Z","published_at":"2021-05-05T19:48:29Z","references":["https://osv.dev/vulnerability/GHSA-5hq2-xf89-9jxq","https://nvd.nist.gov/vuln/detail/CVE-2021-22903","https://hackerone.com/reports/1148025","https://discuss.rubyonrails.org/t/cve-2021-22903-possible-open-redirect-vulnerability-in-action-pack/77867","https://github.com/rails/rails/releases/tag/v6.1.3.2","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22903.yml","https://groups.google.com/g/rubyonrails-security/c/8TxqXEtgSF0"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-5hq2-xf89-9jxq","url":"https://osv.dev/vulnerability/GHSA-5hq2-xf89-9jxq"}],"summary":"Possible Open Redirect Vulnerability in Action Pack"}