← Back to CVE List
CVE-2021-22885
A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper with untrusted user input.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt