description: A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper with untrusted user input.
problem types: Information Exposure Through an Error Message (CWE-209)
affected:
{
product: https://github.com/rails/rails
vendor: n/a
versions:
status: affected, version: 6.1.3.1, 6.0.3.7, 5.2.4.6, 5.2.6
}