Devise Masquerade Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Devise Masquerade Project records in CISA KEV

No Devise Masquerade Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Devise Masquerade · all components

TI-2021-09746 CVE-2021-28680 · GHSA-25f5-gc4h-hc22

LOW 38

The devise_masquerade gem before 1.3 allows certain attacks when a password's salt is unknown.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0125 Published 2021-12-07 Fixed in 1.3.1 CWE-269