CVE-2021-22903: rubyonrails rails

csirt@kutim:~/threat-intel/cve/CVE-2021-22903

CVSS 6.1 · Medium EPSS 1,2%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada rubyonrails rails. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

The actionpack ruby gem before 6.1.3.2 suffers from a possible open redirect vulnerability. Specially crafted Host headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. This is similar to CVE-2021-22881. Strings in config.hosts that do not have a leading dot are converted to regular expressions without proper escaping. This causes, for example, `config.hosts << "sub.example.com"` to permit a request with a Host header value of `sub-example.com`.

Rincian

Terbit di NVD: 11 Juni 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
EPSS (30 hari): 1,2% peluang dieksploitasi; lebih tinggi dari 68,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
rubyonrails	rails	Versi 6.1.1 hingga sebelum 6.1.3.2
rubyonrails	rails	Versi 6.1.0 rc2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://discuss.rubyonrails.org/t/cve-2021-22903-possible-open-redirect-vulnerability-in-action-pack/77867 mitigasi · patch · advisory vendor
https://hackerone.com/reports/1148025 permissions required · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.