high7.6
CVE-2021-23435
Clearance Gem Open Redirect Vulnerability
Impact
This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of `session[:return_to]`. If the value used for return_to contains multiple leading slashes (`/////example.com`) the user ends up being redirected to the external domain that comes after the slashes (`http://example.com`).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rubygems | clearance | < 2.5.0 | 2.5.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thoughtbot | Clearance | before 2.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/thoughtbot/clearance/pull/945
- https://snyk.io/vuln/SNYK-RUBY-CLEARANCE-1577284
- https://github.com/advisories/GHSA-4hpq-rjcx-7vj9
- https://nvd.nist.gov/vuln/detail/CVE-2021-23435
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/clearance/CVE-2021-23435.yml