Weakness (CWE)
CWE-704: Incorrect Type Conversion or Cast
Class Incomplete
The product does not correctly convert an object, resource, or structure from one type to a different type.
Source: MITRE CWE-704
1 result · Clear filters · Feed
-
Medium —
Devise does not properly perform type conversion when performing database queries
Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incor…