GHSA-4hpq-rjcx-7vj9

Clearance Gem Open Redirect Vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2021-23435

Packages

Ecosystem	Package	Affected	Fixed in
RubyGems	clearance	< 2.5.0	2.5.0

Details

As written in the advisory (Markdown source, shown as plain text).

This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of `session[:return_to]`. If the value used for return_to contains multiple leading slashes (`/////example.com`) the user ends up being redirected to the external domain that comes after the slashes (`http://example.com`).

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-23435 advisory
https://github.com/thoughtbot/clearance/pull/945 web
https://github.com/advisories/GHSA-4hpq-rjcx-7vj9 advisory
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/clearance/CVE-2021-23435.yml web
https://github.com/thoughtbot/clearance package
https://snyk.io/vuln/SNYK-RUBY-CLEARANCE-1577284 web