CVE-2021-22885CWE-209

A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper…

published May 27, 2021

CVSS
—
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper with untrusted user input.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04082 · 90.7th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2021-05-27T11:15Z
EPSS history
Timeline
  • 27 MAY 11:15Z
    A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper…
    cvelistv5