What the vulnerability does
01Description
A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper with untrusted user input.
CVSS base score
—
Key dates
02Disclosure timeline
May 27, 2021
CVE published
August 3, 2024
Record updated
External resources
