devise vulnerabilities (RubyGems)
6 vulnerabilities.
-
deviseRubyGems Devise: Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler 6.1 Medium -
deviseRubyGems Devise has a confirmable "change email" race condition that permits user to confirm email they have no access to 6.0 Medium -
deviseRubyGems Devise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie 7.5 High -
deviseRubyGems Authentication Bypass in Devise 5.3 Medium -
deviseRubyGems devise Time-of-check Time-of-use Race Condition vulnerability 9.8 Critical -
deviseRubyGems Devise does not properly perform type conversion when performing database queries 6.8 Medium