Skip to content
OpenAdvisories

Product · solidusio

solidus_auth_devise

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2021-41274

    Authentication Bypass by CSRF Weakness

    solidus_auth_devise provides authentication services for the Solidus webstore framework, using the Devise gem. In affected versions solidus_auth_devise is subject to a CSRF vulnerability that allows user account takeover. All applications using any version of…

    solidusio solidus_auth_devise solidus_auth_devise RubyGems