CVE-2023-22797

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-09 · updated 2026-06-17
Weakness: CWE-601

Description

An open redirect vulnerability is fixed in Rails 7.0.4.1 with the new protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could allow an attacker to bypass with a carefully crafted URL resulting in an open redirect vulnerability.

Affected products

Actionpack Project Actionpack: from 7.0.0 before 7.0.4.1 — fixed in 7.0.4.1
Ruby on Rails: from 7.0.0 before 7.0.4.1 — fixed in 7.0.4.1

How to fix

Upgrade to a fixed version: Actionpack Project Actionpack 7.0.4.1; Ruby on Rails 7.0.4.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-22797 or the next vulnerability affects your stack