Skip to content
OpenAdvisories

Product · Plataformatec

Devise ruby gem

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2019-5421

    devise Time-of-check Time-of-use Race Condition vulnerability

    Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specifically at the `#increment_failed_attempts` method. File location: lib/devise/models/lockable.rb that…

    Plataformatec Devise ruby gem gitlab devise Debian Ubuntu RubyGems