Read the docs

Plataformatec

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Plataformatec records in CISA KEV

No Plataformatec vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Devise 3 records MEDIUM Simple Form 1 record MEDIUM

Records

3 records in Devise · all components

TI-2019-03831 CVE-2019-5421 · GHSA-73rf-6mrf-759q

Time-of-check time-of-use race condition in Plataformatec Devise ruby gem

Priority MEDIUM 45

Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specifically at the `#increment_failed_attempts` method.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01556 Published 2019-04-03 Fixed in 4.6.0 CWE-367
TI-2013-00167 CVE-2013-0233 · GHSA-jxhw-mg8m-2pj8

Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before…

Priority MEDIUM 45

Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which migh…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.14126 Published 2013-04-25 Fixed in 2.2.3, 2.1.3 +2 CWE-399
Open these records in search →