Fluid Attacks Database

Description

A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 14	rails	>=0 <2:6.1.4.6+dfsg-1	2:6.1.4.6+dfsg-1
debian 12	rails	>=0 <2:6.1.4.6+dfsg-1	2:6.1.4.6+dfsg-1
debian 13	rails	>=0 <2:6.1.4.6+dfsg-1	2:6.1.4.6+dfsg-1
rubygems	rails	>=6.0.4.2 <=6.1.4.2 \|\| =7.0.0	6.1.4.3, 7.0.1
rubygems	actionpack	>=6.0.0 <6.0.4.2 \|\| >=6.1.0 <6.1.4.2	6.0.4.2, 6.1.4.2

Aliases

1. CVE-2021-445282. NVD-2021-445283. OSV-DEBIAN-2021-445284. OSV-2021-445285. GCVE-2021-445286. SECURITY-TRACKER-CVE-2021-44528

References

1. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44528.yaml2. https://github.com/rails/rails/commit/0fccfb9a3097a9c4260c791f1a40b128517e78153. https://github.com/rails/rails/commit/aecba3c301b80e9d5a63c30ea1b287bceaf2c1074. https://github.com/rails/rails/blob/v6.1.4.2/actionpack/CHANGELOG.md#rails-6142-december-14-20215. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-44528.yml6. https://groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ7. https://groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ?utm_medium=email&utm_source=footer8. https://security.netapp.com/advisory/ntap-20240208-00039. https://www.debian.org/security/2023/dsa-5372

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.