Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Actionpack Project Subscribe
Filtered by product Actionpack
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-22797 2 Actionpack Project, Rubyonrails 2 Actionpack, Rails 2023-02-21 N/A 6.1 MEDIUM
An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability.