logo

Database

Server-side request forgery (SSRF) In gitlab

Description

open redirect

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2021-229422. NVD-2021-229423. OSV-DEBIAN-2021-229424. OSV-2021-229425. GCVE-2021-229426. SECURITY-TRACKER-CVE-2021-229427. ACCESS-cve-2021-22942

References

1. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22942.yml2. https://groups.google.com/g/rubyonrails-security/c/wB5tRn7h36c3. https://rubygems.org/gems/actionpack4. https://security.netapp.com/advisory/ntap-20240202-00055. https://weblog.rubyonrails.org/2021/8/19/Rails-6-0-4-1-and-6-1-4-1-have-been-released6. https://www.debian.org/security/2023/dsa-53727. http://www.openwall.com/lists/oss-security/2021/12/14/58. https://weblog.rubyonrails.org/2021/8/19/Rails-6-0-4-1-and-6-1-4-1-have-been-released/

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.