github.com
https://github.com/rails/rails CVE-2021-44528
MEDIUMNuclei
actionpack Open Redirect in Host Authorization Middleware
Record summary
CVE-2021-44528 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.
Description
A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.
Description source: CVE List
Exploitation context
Available material
- Nuclei templates
- 1
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
https://github.com/rails/rails | CVE List | 6.1.4.2, 6.0.4.2, 7.0.0.rc2 | affected |
actionpackBrowse RubyGems / actionpack | GitHub Advisory | 6.0.0 to < 6.0.4.2 · Fixed in 6.0.4.2 | affected |
| 6.1.0 to < 6.1.4.2 · Fixed in 6.1.4.2 | affected |
Nuclei templates
1ProjectDiscoveryMEDIUMOpen Redirect in Host Authorization MiddlewareCVSS 6.1
Specially crafted "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.
Impact
This vulnerability can lead to phishing attacks, where users are tricked into visiting malicious websites and disclosing sensitive information.
Remediation
Apply the latest security patches or updates provided by the vendor to fix the Open Redirect vulnerability in the Host Authorization Middleware.
WeaknessesCWE-601
Authorsgeeknik
Template tagscve2021cveseclistsredirectrubyonrailsvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:rubyonrails:rails:6.0.4.2:*:*:*:*:*:*:*
Shodan: cpe:"cpe:2.3:a:rubyonrails:rails"
https://seclists.org/oss-sec/2021/q4/att-160/7-0-host-authorzation-open-redirect.patch https://nvd.nist.gov/vuln/detail/CVE-2021-44528 https://github.com/rails/rails/commit/0fccfb9a3097a9c4260c791f1a40b128517e7815 https://www.debian.org/security/2023/dsa-5372 https://security.netapp.com/advisory/ntap-20240208-0003/
Source: ProjectDiscovery
References
9github.com
https://github.com/rails/rails/blob/v6.1.4.2/actionpack/CHANGELOG.md github.com
https://github.com/rails/rails/commit/0fccfb9a3097a9c4260c791f1a40b128517e7815 github.com
https://github.com/rails/rails/commit/aecba3c301b80e9d5a63c30ea1b287bceaf2c107 github.com
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-44528.yml groups.google.com
https://groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-44528 security.netapp.com
https://security.netapp.com/advisory/ntap-20240208-0003 DSA-5372Vendor advisory
https://www.debian.org/security/2023/dsa-5372