HIGH7.6

GHSA-4hpq-rjcx-7vj9

Clearance Gem Open Redirect Vulnerability

Quick fix

GHSA-4hpq-rjcx-7vj9 — clearance: upgrade to the fixed version with the command below.

bundle update clearance

Details

This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of `session[:return_to]`. If the value used for return_to contains multiple leading slashes (`/////example.com`) the user ends up being redirected to the external domain that comes after the slashes (`http://example.com`).

Are you affected?

Enter the version of the package you're using.

Affected packages

RubyGems/clearance

Introduced in: 0Fixed in: 2.5.0

Fixbundle update clearance

References

https://nvd.nist.gov/vuln/detail/CVE-2021-23435[ADVISORY]
https://github.com/thoughtbot/clearance/pull/945[WEB]
https://github.com/advisories/GHSA-4hpq-rjcx-7vj9[ADVISORY]
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/clearance/CVE-2021-23435.yml[WEB]
https://github.com/thoughtbot/clearance[PACKAGE]
https://snyk.io/vuln/SNYK-RUBY-CLEARANCE-1577284[WEB]