TI-2019-12102 CVE-2019-16109 · GHSA-fcjw-8rhj-gwwc
An issue was discovered in Plataformatec Devise before 4.7.1.
Priority LOW 28
An issue was discovered in Plataformatec Devise before 4.7.1.
Vulnerabilities
3 records
TI-2019-03831 CVE-2019-5421 · GHSA-73rf-6mrf-759q
Time-of-check time-of-use race condition in Plataformatec Devise ruby gem
Priority MEDIUM 45
Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specifically at the `#increment_failed_attempts` method.
TI-2013-00167 CVE-2013-0233 · GHSA-jxhw-mg8m-2pj8
Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before…
Priority MEDIUM 45
Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which migh…