CVE-2023-22797
published 2023-02-09CVE-2023-22797: An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In…
PriorityP426medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.60%
45.1th percentile
An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| actionpack_project | actionpack | >= 7.0.0 < 7.0.4.1 | 7.0.4.1 |
| actionpack_project | actionpack | >= 7.0.0 < 7.0.4.1 | 7.0.4.1 |
| debian | rails | — | — |
| https | github.com_rails_rails | — | — |
| rubyonrails | rails | >= 7.0.0 < 7.0.4.1 | 7.0.4.1 |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
ghsa6.1MEDIUM
osv6.1MEDIUM
vendor_debian6.1LOW
vendor_redhat6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-22797: An open redirect vulnerability is fixed in Rails 7
osv·2023-02-09·CVSS 6.1
CVE-2023-22797 [MEDIUM] CVE-2023-22797: An open redirect vulnerability is fixed in Rails 7
An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability.
OSV
Open Redirect Vulnerability in Action Pack
osv·2023-01-18·CVSS 6.1
CVE-2023-22797 [MEDIUM] Open Redirect Vulnerability in Action Pack
Open Redirect Vulnerability in Action Pack
There is a vulnerability in Action Controller’s redirect_to. This vulnerability has been assigned the CVE identifier CVE-2023-22797.
Versions Affected: >= 7.0.0 Not affected: < 7.0.0 Fixed Versions: 7.0.4.1
Impact
There is a possible open redirect when using the redirect_to helper with untrusted user input.
Vulnerable code will look like this:
```
redirect_to(params[:some_param])
```
Rails 7.0 introduced protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could be bypassed by a carefully crafted URL.
All users running an affected release should either upgrade or use one of the workarounds imme
GHSA
Open Redirect Vulnerability in Action Pack
ghsa·2023-01-18·CVSS 6.1
CVE-2023-22797 [MEDIUM] CWE-601 Open Redirect Vulnerability in Action Pack
Open Redirect Vulnerability in Action Pack
There is a vulnerability in Action Controller’s redirect_to. This vulnerability has been assigned the CVE identifier CVE-2023-22797.
Versions Affected: >= 7.0.0 Not affected: < 7.0.0 Fixed Versions: 7.0.4.1
Impact
There is a possible open redirect when using the redirect_to helper with untrusted user input.
Vulnerable code will look like this:
```
redirect_to(params[:some_param])
```
Rails 7.0 introduced protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could be bypassed by a carefully crafted URL.
All users running an affected release should either upgrade or use one of the workarounds imme
Red Hat
rubygem-actionpack: Open Redirect Vulnerability in Action Controller
vendor_redhat·2023-01-20·CVSS 6.1
CVE-2023-22797 [MEDIUM] CWE-601 rubygem-actionpack: Open Redirect Vulnerability in Action Controller
rubygem-actionpack: Open Redirect Vulnerability in Action Controller
An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability.
Package: rubygem-actionpack (Red Hat Satellite 6) - Not affected
Debian
CVE-2023-22797: rails - An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection...
vendor_debian·2023·CVSS 6.1
CVE-2023-22797 [MEDIUM] CVE-2023-22797: rails - An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection...
An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
2023-02-09
Published