{"action":"Upgrade actionpack to 5.2.4.6 or later.","affected":[{"fixed":"6.0.3.7","introduced":"6.0.0"},{"fixed":"6.1.3.2","introduced":"6.1.0"},{"fixed":"5.2.6","introduced":"5.2.5"},{"fixed":"5.2.4.6","introduced":"2.0.0"}],"component":"actionpack","cve_ids":["CVE-2021-22885"],"ecosystem":"RubyGems","epss":0.04082,"exploited":false,"fixed_versions":["6.0.3.7","6.1.3.2","5.2.6","5.2.4.6"],"ghsa_id":"GHSA-hjg4-8q5f-x6fm","id":"tcs_01M5KEKMJYY5D9N4JDTA6QA55G","modified_at":"2024-02-22T05:32:49.668911Z","published_at":"2021-05-05T19:49:02Z","references":["https://osv.dev/vulnerability/GHSA-hjg4-8q5f-x6fm","https://nvd.nist.gov/vuln/detail/CVE-2021-22885","https://hackerone.com/reports/1106652","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22885.yml","https://groups.google.com/g/rubyonrails-security/c/NiQl-48cXYI","https://security.netapp.com/advisory/ntap-20210805-0009"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hjg4-8q5f-x6fm","url":"https://osv.dev/vulnerability/GHSA-hjg4-8q5f-x6fm"}],"summary":"Action Pack contains Information Disclosure / Unintended Method Execution vulnerability"}