CVE-2021-44528

MEDIUM NUCLEI

Rails Action Pack >=6.0.0 <6.0.4.2 - Open Redirect via X-Forwarded-Host Header

Title source: llm

Exploitation Summary

CVE-2021-44528 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.

Nuclei Templates (1)

Open Redirect in Host Authorization Middleware

MEDIUMby geeknik

Shodan: cpe:"cpe:2.3:a:rubyonrails:rails"

References (3)

Core 3

Core References

Third Party Advisory vendor-advisory

https://www.debian.org/security/2023/dsa-5372

Patch, Third Party Advisory

https://github.com/rails/rails/commit/0fccfb9a3097a9c4260c791f1a40b128517e7815

Vendor Advisory

https://security.netapp.com/advisory/ntap-20240208-0003/

Scores

CVSS v3 6.1

EPSS 0.0418

EPSS Percentile 89.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (4)

rubygems/actionpack 6.0.0 - 6.0.4.2RubyGems

rubyonrails/rails 6.0.4.2

rubyonrails/rails 6.1.4.2

rubyonrails/rails 7.0.0 rc2

Published Jan 10, 2022

Tracked Since Feb 18, 2026