CVE-2021-22942

score

<0.1

cvss

6.1

epss

1.7%

published

2021-10-18

kev added

—

first seen

2026-10-21

Action Pack >= 6.0.0 contains a open redirect caused by insufficient validation in Host Authorization middleware, letting attackers redirect users to malicious websites, exploit requires attacker to control redirect URL.