Skip to content
OpenAdvisories

Package · Debian

ruby-devise

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —
    CVE-2013-0233 Public exploit EPSS 14%

    Devise does not properly perform type conversion when performing database queries

    Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incor…