AVG-2492 log
| Package | gitlab |
| Status | Fixed |
| Severity | Medium |
| Type | open redirect |
| Affected | 14.3.3-2 |
| Fixed | 14.5.0-1 |
| Current | 17.5.2-1 [extra] |
| Ticket | None |
| Created | Fri Oct 22 10:38:25 2021 |
| Issue | Severity | Remote | Type | Description |
|---|---|---|---|---|
| CVE-2021-22942 | Medium | Yes | Open redirect | A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 before versions 6.1.4.1 and 6.0.4.1 that could allow... |
| Notes |
|---|
GitLab version 14.3.3 bundles Action Pack version 6.1.3.2, GitLab version 14.5.0 undles Action Pack version 6.1.4.1. |