CVE-2021-22903

score

<0.1

cvss

6.1

epss

1.2%

published

2021-06-11

kev added

—

first seen

2026-10-21

Actionpack Ruby gem before 6.1.3.2 contains an open redirect caused by improper handling of Host headers and allowed host formats, letting attackers redirect users to malicious sites, exploit requires crafted Host headers.