{"action":"Upgrade actionpack to 7.0.4.1 or later.","affected":[{"fixed":"7.0.4.1","introduced":"7.0.0"}],"component":"actionpack","cve_ids":["CVE-2023-22797"],"ecosystem":"RubyGems","epss":0.00595,"exploited":false,"fixed_versions":["7.0.4.1"],"ghsa_id":"GHSA-9445-4cr6-336r","id":"tcs_01M5KEJ73QS79VC2B5N93H580D","modified_at":"2024-02-16T08:22:57.644557Z","published_at":"2023-01-18T18:21:23Z","references":["https://osv.dev/vulnerability/GHSA-9445-4cr6-336r","https://nvd.nist.gov/vuln/detail/CVE-2023-22797","https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127","https://github.com/rails/rails","https://github.com/rails/rails/releases/tag/v7.0.4.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-22797.yml"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-9445-4cr6-336r","url":"https://osv.dev/vulnerability/GHSA-9445-4cr6-336r"}],"summary":"Open Redirect Vulnerability in Action Pack"}