CVE-2024-21510: Sinatra Open Redirect via X-Forwarded-Host Header

Key Information Vulnerability Description Name: Reliance on Untrusted Inputs in a Security Decision Affected Package: sinatra Affected Versions: >=0.0.0 Introduced Date: March 26, 2024 CVE ID: CVE-2024-21510 CWE ID: CWE-807 First Discovered By: Snyk Vulnerability Impact Threat Type: Open Redirect Attack Attack Vector: X-Forwarded-Host (XFH) header Attack Method: Triggering an Open Redirect Attack by inserting arbitrary addresses into the X-Forwarded-Host header. Exploitation Exploitation Scenario: When using redirect methods, attackers can exploit the X-Forwarded-Host header to trigger an Open Redirect Attack. Exploitation Conditions: If used for caching purposes (e.g., Nginx or reverse proxies) and the X-Forwarded-Host header is not properly handled, attackers may exploit cache injection or routing-based SSRF vulnerabilities. CVSS Score Score: 5.3 (Medium) Score Basis: Evaluated by Snyk's Security Team Remediation Recommendation: No fixed version available. Additional Information GitHub PR: Partial fix Vulnerable Code: Affected code Vulnerable Code: Affected code CVSS Score Breakdown AV: Network (Low) AC: Low PR: None UI: Passive Other Links GitHub PR: Partial fix Vulnerable Code: Affected code Vulnerable Code: Affected code Company Information Company Name: Snyk Limited Company Registration Number: 09677925 Company Address: Highlands House, Basingstoke Road, Spencers Wood, Reading, Berkshire, RG7 1NT

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-21510: Sinatra Open Redirect via X-Forwarded-Host Header