The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect     vulnerability. Specially crafted `Host` headers in combination with certain allowed host formats can     cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted     applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a     specially crafted `Host` header can be used to redirect to a malicious website. (CVE-2021-22881)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-b571fca1b8 advisory.

  - The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression     denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the     `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression,     resulting in the potential for a DoS attack. This only impacts Rails applications that are using     PostgreSQL along with money type columns that take user input. (CVE-2021-22880)

  - The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect     vulnerability. Specially crafted `Host` headers in combination with certain allowed host formats can     cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted     applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a     specially crafted `Host` header can be used to redirect to a malicious website. (CVE-2021-22881)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Ruby on Rails blog :

Rails version 5.2.4.5, 6.0.3.5 and 6.1.2.1 have been released! Those version are security releases and addresses two issues :

CVE-2021-22880: Possible DoS Vulnerability in Active Record PostgreSQL adapter.

CVE-2021-22881: Possible Open Redirect in Host Authorization Middleware.

ID	Name	Product	Family	Severity
250960	Linux Distros Unpatched Vulnerability : CVE-2021-22881	Nessus	Misc.	medium
147802	Fedora 33 : 1:rubygem-actionpack / 1:rubygem-activerecord (2021-b571fca1b8)	Nessus	Fedora Local Security Checks	medium
146574	FreeBSD : Rails -- multiple vulnerabilities (8e670b85-706e-11eb-abb2-08002728f74c)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2021-22881

medium

Tenable Plugins

medium

medium

medium