A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow malicious users to redirect users to a malicious website.
Debian Bug report logs -
#992586
rails: CVE-2021-22942: Possible Open Redirect in Host Authorization Middleware
Package:
src:rails;
Maintainer for src:rails is Debian Ruby Team <pkg-ruby-extras-maintainers@listsaliothdebianorg>;
Reported by: Salvatore Bonaccorso <carnil@debianorg>
Date: Fri, 20 Aug 2021 14:24:02 U ...
Multiple vulnerabilities were discovered in rails, the Ruby based server-side
MVC web application framework, which could result in XSS, data disclosure
and open redirect
For the stable distribution (bullseye), these problems have been fixed in
version 2:6037+dfsg-2+deb11u1
We recommend that you upgrade your rails packages
For the detailed sec ...
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 600 before versions 6141 and 6041 that could allow attackers to redirect users to a malicious website ...
Vulmon