| Title | Ruby on Rails - Open Redirect via Host Header Injection |
|---|---|
| Author | theamanrawat |
| Severity | Medium |
| Impact | Attackers can redirect users to malicious sites, potentially leading to phishing or malware distribution. |
| Remediation | Update to version 6.1.2.1, 6.0.3.5 or later versions. |
| CVSS Score | 6.1 |
| EPSS Score | 0.11507 |
| CVE ID | CVE-2021-22881 |
| CWE ID | CWE-601 |
| Tags | cve cve2021 ruby rails host-header redirect vuln |
Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers.
GET / HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22881.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-22881.pcap
N/AN/A