{"action":"Upgrade actionpack to 6.0.4.2 or later.","affected":[{"fixed":"6.0.4.2","introduced":"6.0.0"},{"fixed":"6.1.4.2","introduced":"6.1.0"}],"component":"actionpack","cve_ids":["CVE-2021-44528"],"ecosystem":"RubyGems","epss":0.04182,"exploited":false,"fixed_versions":["6.0.4.2","6.1.4.2"],"ghsa_id":"GHSA-qphc-hf5q-v8fc","id":"tcs_01M5KEN104HR46KZNJD304PB7X","modified_at":"2024-03-06T12:28:12.305219Z","published_at":"2021-12-14T21:19:08Z","references":["https://osv.dev/vulnerability/GHSA-qphc-hf5q-v8fc","https://nvd.nist.gov/vuln/detail/CVE-2021-44528","https://github.com/rails/rails/commit/0fccfb9a3097a9c4260c791f1a40b128517e7815","https://github.com/rails/rails/commit/aecba3c301b80e9d5a63c30ea1b287bceaf2c107","https://github.com/rails/rails","https://github.com/rails/rails/blob/v6.1.4.2/actionpack/CHANGELOG.md#rails-6142-december-14-2021","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-44528.yml","https://groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ","https://groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ?utm_medium=email&utm_source=footer","https://security.netapp.com/advisory/ntap-20240208-0003","https://www.debian.org/security/2023/dsa-5372"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-qphc-hf5q-v8fc","url":"https://osv.dev/vulnerability/GHSA-qphc-hf5q-v8fc"}],"summary":"actionpack Open Redirect in Host Authorization Middleware"}