Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-12x8-jxdf-jqdz
Aliases:
CVE-2021-22881
GHSA-8877-prq4-9xfw
|
Actionpack Open Redirect Vulnerability
The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|