Read the docs

spree

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

spree records in CISA KEV

No spree vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Spree 12 records HIGH Spree Auth Devise 1 record MEDIUM

Records

1 record in Spree Auth Devise · all components

TI-2021-18107 CVE-2021-41275 · GHSA-26xx-m4q2-xhq8

Authentication Bypass by CSRF Weakness

Priority MEDIUM 41

spree_auth_devise is an open source library which provides authentication and authorization services for use with the Spree storefront framework by using an underlying Devise authentication framework.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00646 Published 2021-11-17 Fixed in 4.4.1, 4.2.1 +2 CWE-352
Open these records in search →