The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect     vulnerability. Specially crafted `Host` headers in combination with certain allowed host formats can     cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted     applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a     specially crafted `Host` header can be used to redirect to a malicious website. (CVE-2021-22881)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect
    vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" formats can
    cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted
    applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a
    specially crafted `Host` header can be used to redirect to a malicious website. (CVE-2021-22881)

The remote Fedora 33 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2021-b571fca1b8 advisory.

  - The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression     denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the     `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression,     resulting in the potential for a DoS attack. This only impacts Rails applications that are using     PostgreSQL along with money type columns that take user input. (CVE-2021-22880)

  - The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect     vulnerability. Specially crafted `Host` headers in combination with certain allowed host formats can     cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted     applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a     specially crafted `Host` header can be used to redirect to a malicious website. (CVE-2021-22881)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Ruby on Rails blog :

Rails version 5.2.4.5, 6.0.3.5 and 6.1.2.1 have been released! Those version are security releases and addresses two issues :

CVE-2021-22880: Possible DoS Vulnerability in Active Record PostgreSQL adapter.

CVE-2021-22881: Possible Open Redirect in Host Authorization Middleware.

ID	Name	Product	Family	Type	Severity
250960	Linux Distros Unpatched Vulnerability : CVE-2021-22881	Nessus	Misc.	Local	medium
412535	SCA: security update for actionpack (GHSA-8877-prq4-9xfw)	Tenable Cloud Security	SCA Checks	Local	medium
412535	SCA: security update for actionpack (GHSA-8877-prq4-9xfw)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
147802	Fedora 33 : 1:rubygem-actionpack / 1:rubygem-activerecord (2021-b571fca1b8)	Nessus	Fedora Local Security Checks	Local	medium
146574	FreeBSD : Rails -- multiple vulnerabilities (8e670b85-706e-11eb-abb2-08002728f74c)	Nessus	FreeBSD Local Security Checks	Local	medium

Detections

Analytics

CVE-2021-22881

medium

Tenable Plugins

medium

medium

medium

medium

medium