Description (CNA)
The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rails / Action Pack | affected 7.0.5.1 before 7.0.5.1; affected 6.1.7.4 before 6.1.7.4 |
CWE
No CWE identifiers supplied.
References
- https://discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to-redirect-to/83132
- https://github.com/advisories/GHSA-4g8v-vg43-wpgf
- https://github.com/rails/rails/commit/1c3f93d1e90a3475f9ae2377ead25ccf11f71441
- https://github.com/rails/rails/commit/69e37c84e3f77d75566424c7d0015172d6a6fac5
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.