CVE-2023-22797

score

<0.1

cvss

6.1

epss

0.6%

published

2023-02-09

kev added

—

first seen

2026-10-21

Rails 7.0.4.1 contains an open redirect vulnerability caused by a bypass in the new protection against untrusted user input in redirect_to, letting attackers redirect users to malicious sites, exploit requires attacker to craft a specific URL.