CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. Its EPSS score suggests a 87.3% probability of exploitation in the next 30 days.
CVE
CVE-2021-22881
Severity
MEDIUM
CVSS
6.1
EPSS
87.30%
Original NVD Description
The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.
Related CVEs
Other vulnerabilities affecting the same vendor(s)