Plataformatec Devise
3 CVEs affecting Plataformatec Devise. Latest disclosed: 2019-09-08. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-5421 | Critical | 9.8 | 2019-04-03 | Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specif… |
CVE-2019-16109 | Medium | 5.3 | 2019-09-08 | An issue was discovered in Plataformatec Devise before 4.7.1. It confirms accounts upon receiving a request with a blank confirmation_token, if a database reco… |
CVE-2013-0233 | | 2013-04-25 | Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform… |