CVE-2021-22881

Description

The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.

How to fix CVE-2021-22881

To remediate CVE-2021-22881, upgrade the affected package to a fixed version below.

• —upgrade to 2:6.0.3.5+dfsg-1 or later
• —upgrade to 6.0.3.5 or later

Is CVE-2021-22881 being exploited?

Moderate — EPSS is 15.5%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (2)

• from 0, < 2:6.0.3.5+dfsg-1
• >= 6.0.0, < 6.0.3.5

CVSS scores

References (15)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2021-22881
• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2021-22881
• WEBbenjamin-bouchet.com/cve-2021-22881-faille-de-securite-dans-le-middleware-hostauthorization
• WEBdiscuss.rubyonrails.org/t/cve-2021-22881-possible-open-redirect-in-host-authorization-middleware/77130