CVE-2021-22885
Assigner: hackerone
Published: 2021-05-27T11:15:32
State: PUBLISHED
affected: product: https://github.com/rails/rails
vendor: n/a
versions: status: affected
version: 6.1.3.1, 6.0.3.7, 5.2.4.6, 5.2.6
descriptions: value: A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper with untrusted user input.
problemTypes: descriptions: cweId: CWE-209
description: Information Exposure Through an Error Message (CWE-209)
type: CWE