Skip to content
OpenAdvisories

Product · rails

Action Pack

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.0
    CVE-2023-28362

    Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to

    The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Locati…

    rails Action Pack rails actionpack Debian Ubuntu RubyGems