Bug 2323117 (CVE-2024-21510)

Summary:	CVE-2024-21510 sinatra: Open Redirect Vulnerability in Sinatra via X-Forwarded-Host Header
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	akostadi, amasferr, anthomas, cbartlet, chazlett, dmayorov, ehelms, ggainey, jlledo, juwatts, mhulan, mkudlej, mmakovy, nmoumoul, osousa, pcreech, rchan, smallamp, tjochec, vondruch
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in Sinatra. This vulnerability allows an Open Redirect attack via the X-Forwarded-Host (XFH) header, potentially enabling Cache Poisoning or Server-Side Request Forgery (SSRF) when used in caching servers or reverse proxies.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2326643, 2326642, 2326644
Bug Blocks:

Description OSIDB Bzimport 2024-11-01 06:01:19 UTC

Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header. When making a request to a method with redirect applied, it is possible to trigger an Open Redirect Attack by inserting an arbitrary address into this header. If used for caching purposes, such as with servers like Nginx, or as a reverse proxy, without handling the X-Forwarded-Host header, attackers can potentially exploit Cache Poisoning or Routing-based SSRF.

Comment 3 errata-xmlrpc 2024-12-12 09:58:53 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:10987 https://access.redhat.com/errata/RHSA-2024:10987

Comment 4 Vít Ondruch 2025-06-12 12:19:24 UTC

Affects Sinatra < 4.1.0