Skip to content
OpenAdvisories

Weakness (CWE)

CWE-704: Incorrect Type Conversion or Cast

Class Incomplete

The product does not correctly convert an object, resource, or structure from one type to a different type.

Source: MITRE CWE-704

1 result · Clear filters · Feed

  • Medium —
    CVE-2013-0233 Public exploit EPSS 14%

    Devise does not properly perform type conversion when performing database queries

    Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incor…