🔙 목록으로 돌아가기

CVE-2021-22881: Ruby on Rails - Open Redirect via Host Header Injection

TitleRuby on Rails - Open Redirect via Host Header Injection
Authortheamanrawat
SeverityMedium
ImpactAttackers can redirect users to malicious sites, potentially leading to phishing or malware distribution.
RemediationUpdate to version 6.1.2.1, 6.0.3.5 or later versions.
CVSS Score6.1
EPSS Score0.11507
CVE IDCVE-2021-22881
CWE IDCWE-601
Tags cve cve2021 ruby rails host-header redirect vuln

🔍 Vulnerability Description

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers.

🌐 HTTP Request

GET / HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22881.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-22881.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A