Lucene search

CVE-2013-0233

🗓️ 25 Apr 2013 23:00:00Reported by redhatType

Devise gem 2.2.x - 1.5.x for Ruby database type conversion vulnerability

Reporter	Title	Published	Views	Family All 11
Packet Storm	Ruby On Rails Devise Authentication Password Reset	31 Aug 202400:00	–	packetstorm
OSV	Devise does not properly perform type conversion when performing database queries	24 Oct 201718:33	–	osv
UbuntuCve	CVE-2013-0233	25 Apr 201300:00	–	ubuntucve
Prion	Type confusion	25 Apr 201323:55	–	prion
NVD	CVE-2013-0233	25 Apr 201323:55	–	nvd
CVE	CVE-2013-0233	25 Apr 201323:55	–	cve
RubySec	Devise Database Type Conversion Crafted Request Parsing Security Bypass	27 Jan 201320:00	–	rubygems
Debian CVE	CVE-2013-0233	25 Apr 201323:55	–	debiancve
Tenable Nessus	openSUSE Security Update : rubygem-devise (openSUSE-SU-2013:0374-1)	13 Jun 201400:00	–	nessus
Metasploit	Ruby on Rails Devise Authentication Password Reset	11 Feb 201303:10	–	metasploit

Source	Link
metasploit	www.metasploit.com/modules/auxiliary/admin/http/rails_devise_pass_reset
openwall	www.openwall.com/lists/oss-security/2013/01/29/3
securityfocus	www.securityfocus.com/bid/57577
lists	www.lists.opensuse.org/opensuse-updates/2013-03/msg00000.html
phenoelit	www.phenoelit.org/blog/archives/2013/02/05/mysql_madness_and_rails/index.html
github	www.github.com/Snorby/snorby/issues/261
blog	www.blog.plataformatec.com.br/2013/01/security-announcement-devise-v2-2-3-v2-1-3-v2-0-5-and-v1-5-3-released/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Apr 2013 23:00Current

6.9Medium risk

Vulners AI Score6.9

EPSS0.738